- Include at least one character, one number, one capital character, one special character: ~!@#$%^&*()_+|`-={}[]:" < ;' ? >,./
- At least 8 characters long
- Cannot include username and start with 123, 456, 789, 147, 258, 852, 741, abc, 369
- Cannot include too obvious words: qwerty, password, passw0rd, password@123, abc123, iloveyou, viettel@123, admin@123, 123qwea@, abc@123, qwerty@123, vtt@2014, 123@123, 123123, 696969
- Cannot include personal information: name, date of birth, phone number, ID card number, staff code
- Cannot include 4 ascending or descending characters in a row: 1234, 4321, 6789, abcd...
- Example of a valid password: 1Qaz@123.