Administrators must train your users on how to create strong passwords.
Use passwords with eight characters or more.
Do not use words that are available in the dictionary.
Do not use a name, or any variation of the account name or administrator identity.
Do not use accessible information such as phone numbers, birthdays, license plates, or social security numbers.
Use a mixture of uppercase and lowercase letters, as well as digits or punctuation.
Choose a new password that is unrelated to any previous password.