Password must be at least 12 characters. It must not contain your username and cannot be one of the commonly leaked passwords.