should be lower case.
should contain between 6 and 20 characters, including at least 1 number.
cannot reuse any of your last 10 passwords.
will expire every 30 days.
not write your password down.
using people's names (especially your own).
not use swear words or any inappropriate language that will be rejected.
not use words that may not pass spam filters.