Password complexity requires that password contain at least eight characters, not include all or part of the user’s account name and contain at least three of the following four character types: lowercase letters, uppercase letters, digits and non-alphabetic characters.