Password must be at least 8 characters alphanumeric (including spaces) and must not be a commonly used password (ie. “password”).