Must have at least eight characters.
Should not be based on a dictionary word or username.
Must contain a mix of numbers, letters, and at least one special character.
Must have a mix of upper and lower case letters.
Cannot be the same as the temporary password.