The minimum length must be 10 characters.
Passwords must contain at least 3 of the following to be complex: lowercase letters, uppercase letters, numbers, special characters.