For security purposes, users must change their temporary password after their initial log in and must reset passwords at designated intervals.  Passwords must meet the following requirements:

• Unique
• At least 8 characters long
• Contain at least two letters
• Contain at least one number 
• Contain at least one uppercase letter and one lowercase letter 
• Contain at least one special character:    !  @  #  $  %  ^  &  *  )  (
• Cannot repeat the same character three or more times consecutively (for example, aaa)
• Cannot contain spaces
• Should not contain any portion of the user’s first name, last name or username
• Returning users:  Cannot have been used as one of your previous 10 passwords (reusing passwords is discouraged)
• Returning users:  20% of the characters must be different from your previous password