New passwords must contain at least 14 characters for regular accounts and 20 characters for admin accounts. They must include 3 different character types: uppercase, lowercase, numbers. They cannot match any previously used password or contain any user name information or ID numbers.