At least 8 characters, including one special character (e.g. ! @ # $ %).

New accounts require administrator approval before first sign-in.