Passwords must meet complexity requirements

You can’t re-use your previous 5 passwords

• The password is at least eight (8) characters long.

• The password contains characters from three of the following four categories:

· Uppercase characters (A, B, C, …)

· Lowercase characters (a, b, c, …)

· Numerals (0, 1, 2, 3, 4, 5, 6, 7, 8, 9)

· Non-alphanumeric and Unicode characters, which include the following characters as well as other accented characters and characters not present in common keyboards: (( ) ` ~ ! @ # $ % ^ & * - + = | \ { } [ ] : ; " ' < > , . ? / € Γ ƒ λ and space).

• The password does not contain three or more consecutive characters from your display name (your name and student ID). For each token that is three or more characters long, that token is searched for in the password and if it is present, the password change is rejected.
  
  For example, the name Erin M. Hagens would be split into three tokens: Erin, M, and Hagens. Because the second token is only one character long it would be ignored. Therefore, this user could not have a password that included either "erin" or "hagens" as a substring anywhere in the password. All of these checks are case-insensitive.

These complexity requirements are enforced when a password is changed or a new password is created.