Password cannot be less than 8 characters, entirely numeric, too similar to personal information, or a commonly used password.