When the STIG option is not enabled, the following password requirements must be met:

• The password must contain at least eight characters.

• The password must contain at least one lowercase character (a-z), uppercase character (A-Z), numeric character (0-9), and special character (~!@#$%^&).

• The password cannot be a dictionary word.

• The last seven passwords cannot be reused.

• The new password cannot be similar to the previous passwords.

When the STIG option is enabled, the following password requirements must be met:

• The password must be at least 15 characters long and must include at least one character from the following categories:

  • Numbers

  • Lowercase characters

  • Uppercase characters

  • Special characters (~!@#$%^&)

• The password can contain a maximum of two consecutive repeating characters.

• The password can contain a maximum of four consecutive repeating characters from the same category.

• The password must contain a minimum of eight different characters.

• The password must be retained for a minimum of one day before changing it.

• The password must be changed after a maximum of 60 days.

• The password must not be a dictionary word.

• The last seven passwords cannot be reused.