When the STIG option is not enabled, the following password requirements must be met:

• The password must contain at least eight characters.

• The password must contain at least one lowercase character (a-z), uppercase character (A-Z), numeric character (0-9), and special character (!#$%&+,-.<=>@[]^_{|}~).

• The password cannot be a dictionary word.

• The last seven passwords cannot be reused, and the new password cannot be similar to the previous passwords.

When the STIG option is enabled, the following password requirements must be met:

• The password must be at least 15 characters long and must include at least one character from the following categories:

  • Numbers

  • Lowercase characters

  • Uppercase characters

  • Special characters (!#$%&+,-.<=>@[]^_{|}~)

• The password can contain a maximum of two consecutive repeating characters.

• The password can contain a maximum of four consecutive repeating characters from the same category.

• The password must contain a minimum number of eight different characters.

• The password must be retained for a minimum of 1 day before changing it.

• The password must be changed after a maximum of 60 days.

• The password cannot be a dictionary word.

• The last seven passwords cannot be reused.

• The new password must have at least 8 characters that are different from the old password.