Passwords must contain at least 8 characters, with at least one alphabetic character, at least one numeric character, and at least one special character (!,@,#,$,%,etc.). User names and passwords should not contain an ampersand (&).