at least six characters, and should include at least one of the following: • At least one capital letter (A – Z) • At least one small letter (a – z) • At least one digit (0 -9) • Should not contain "special characters" such as %, for example • A password may not be the same as a user name, or consist of part of a user name. • A password may not be associated with personal information such as, e.g. a name, personal identity number, telephone number, etc. • A password may not be a combination of digits, a word or a common combination of words that can be found in a dictionary or used in everyday language, regardless of language. • A password must be changed every ninetieth day and may not be the same as one used previously. • A password should not be noted down. If noted, the password should be treated as a document of value.