Password length:
Less than 10 characters not allowed
10-15 characters, 3 variants required and expires in 6 months.
16-19 characters, 2 variants required and expires in 1 year.
20+ characters, no requirements on content, expires in 1.5 years.
Dictionary words are vulnerable!
"20 characters?! Okay, I'll find a 20 character word in the dictionary."
"Try again, if it's in a dictionary, it can be cracked in minutes.
How to build a password
Select 3 or more random words that you can remember, string them together, viola! Your password is strong and you'll be set for a year and a half before needing to do that again.
Example: Pick 4 things you liike
cat taco volleyball music
That is 25 characters!