- old and new password must be different
- password must be at least 9 characters long
- password should meet at least three of the following conditions:
- contains lowercase letters,
- uppercase letters,
- digits,
- special characters (eg. !@#$%^&*)
- characters cannot be repeated one after another, e.g. aa 111