- 8 to 72 characters — not met
- At least one letter — not met
- At least one number — not met
- Not a common, sequential or repeated password — not met
Medium or High is required. For High, use 12+ characters — a longer passphrase works well; symbols are optional. Even a password that meets these requirements can be refused if it has appeared in a known data breach.