The password strength of new password should be at least "Good". Typically a good password is more than 8 characters and a combination of upper and lower case, numbers and special characters
Password should not contain First Name or Last Name of the user.