Passwords should: 
•Not contain the user's account name or parts of the user's full name that exceed two consecutive characters
•Be at least six characters in length
•Be unique over the last 3 times that it has been changed, so no resetting the password with the same one 

•Passwords MUST contain characters from three of the following four categories:

• English uppercase characters (A through Z)
• English lowercase characters (a through z)
• Base 10 digits (0 through 9)
• Non-alphabetic characters (for example, !, $, #, %)