Password must be at least 8 characters and include: • Uppercase and lowercase letters • At least one number • At least one symbol • Must not have appeared in known data breaches