Your password can’t be too similar to your other personal information. It must contain at least 8 characters. It can’t be a commonly used password. It can’t be entirely numeric.