Passwords must meet or exceed the "Weak" password threshold. A password that meets or exceeds that threshold is at least 7-8 characters long and contains at least one character from at least two of the following character types: lower-case letter, upper-case letter, number, and special characters (!, ?, $, etc.).