Length: Minimum of 8 characters if you use 4 complexities or 20 if you use two complexities following the BSI (Federal Cyber Security Authority of Germany) recommendations.

Complexity:

  • At least one special character (!@#$%^&*(),.?””:;{}|<>_).
  • At least one numeric digit (e.g., 0-9).
  • At least one lowercase letter (a-z).
  • At least one uppercase letter (A-Z).