What are the password requirements for online account access?
Updated June 20, 2025
Published February 15, 2025
Must be 8-40 characters long Must have at least 2 letters including at least 1 upper-case and 1 lower-case letter Must have at least 1 number Must not be the same as your last 3 passwords Special characters allowed: ! # % ^ & * ( ) + = { } [ ] \ / , ; ? . @ $ _ Your password is case-sensitive. For example, 'Z' is not the same as 'z' Must not contain 'password', other easy-to-guess words, or your first or last name Must not contain your personal data, such as your Social Security Number, account number, name, or date of birth Must not contain consecutive or repetitive characters, such as '1234' or 'aaa'