You MUST change it every 365 days. This is a change from previous settings, but as hackers are becoming more sophisicated, we need to be more careful. You can not reuse a password. The system keeps track of old passwords. Capitalization is not recognized.
Most special characters are usable.
DO NOT 1. DO NOT make the password something personal. For example, the name of a significant other, birth dates of family members, your dogs name, your address, phone number, your favorite color are ones people can guess at rather easily. These are things that a hacker will try first. DO NOT write your a password on a piece of paper.