Property	Requirements
Characters allowed	A – Z a – z 0 – 9 @ # $ % ^ & * – _ ! + = [ ] { } | \ : ‘ , . ? / ` ~ ” ( ) ; blank space
Characters not allowed	Unicode characters.
Length constraints	A minimum of 8 characters and a maximum of 256 characters.
Password restrictions	Requires three out of four of the following Lowercase characters. Uppercase characters. Numbers (0-9). Symbols (see the previous password restrictions).
Password expiry	Default value is 90 days.
Password expiry notification	Default value is 14 days.
Password change history	The last password can’t be used again when the user changes a password.
Password reset history	The last password can be used again when the user resets a forgotten password.
Account lockout	After 10 unsuccessful sign-in attempts with the wrong password, the user is locked out for one minute. Further incorrect sign-in attempts lock out the user for increasing durations of time.