at least 10 characters at least one digit at least one upper case letter at least one lower case letter the password must not contain three of the same characters in the same order as in the user’s name or email address.