Passwords must be at least 8 characters and contain a mix of upper and lower case letters. They must also contain at least one special character. Passwords cannot contain a dash (-) or a period (.).