Password must be at least 8 characters, avoiding commonly used passwords, and may not contain any personal information.