All passwords must contain at least eight characters, and they must contain one uppercase letter, one lowercase letter, one number, and one special character (such as @, #, or $). You can set additional requirements and specify words or character strings that cannot be used in passwords.