Minimum 8 characters, with at least 1 capital letter, 1 number, and 1 special character. Old passwords cannot be reused.