...
Accounts lockout automatically after 6 15 failed login attempts within 30 minutes. After 30 minutes, your account will automatically unlock.
...
Must be at least 12 characters
Must be different than the last 6 10 passwords used
Password cannot contain your name
...