A dynamic standard that changes over time in response to industry need. In 2018, strong passwords contain a minimum of eight (8) characters, must not to contain a common usage word or a word found in the English dictionary, may not contain user name, any part of a full name or access level of the user and must contain characters from at least three (3) of the following four (4) classes of characters: upper case letters (A, B, C, ….Z); lower case letters (a, b, c, ….z); numbers (0,1, 2, …9); non-alphanumeric (“special characters”) such as punctuation symbols.
