- Must be at least 6-digits long
- Cannot be repeated digits (e.g. 111111)
- Cannot be sequential digits (e.g. 123456, 987654)
- Cannot be repeated patterns (e.g. 232323, 123123)
- Cannot be the user’s own extension, phone number
- Cannot be the user’s own extension, phone number reversed
- Cannot be the old (last) password