Have a length between 8 - 64 characters.
Have at least 1 upper case character.
Have at least 1 lower case character.
Not contain easy to guess sequences such as "12345" or "password".