Passwords must be 8-12 characters long, include at least one symbol (%, @, &), and contain two or more numbers (0-9)