Password complexity

Password complexity defines what the password must or must not contain.

Must Contain–by default, the password must contain one of the listed criteria (Uppercase, Lowercase, Number or Special Character). Optionally choose to require 2, 3, or ALL of the listed criteria.
Cannot Contain–by default all of the listed criteria are selected, preventing the password from containing the user’s login ID, standard dictionary word, or the word "Password." Remove the check mark from the check box to allow any of the listed criteria.
A standard dictionary word is any standard word that is more than three characters in length. For example, the password "football" would be invalid.
Special characters include ~!@#$%^&*()