• Memorize passwords, or lock them securely if written down.

• Replace high-value passwords at least once per year.

• Each new password must be different from the previous one.

• Avoid single dictionary words, abbreviations, acronyms, or proper names.

• Passwords should not include sequences (e.g. '777...', '123...', 'abc...').

• On this system, passwords must contain 8-20 characters (a-z, A-Z, 0-9).