Retrieve usernameEmail Address Passwords must be Strong. Include numbers, capitals, special characters (@, #, *, etc.) Be long at least 10 characters Can include spaces and be a passphrase (don’t use the same password in multiple places) Change passwords every 365 days.