Passwords do not expire.
Only the last password is remembered.
Passwords must be 8 to 256 characters long, and must contain 3 out of 4 of lower case, upper case, numbers, and symbols.
Enrolment in Multifactor authentication is mandatory.
Available methods for multifactor are mobile phone SMS, Microsoft Authenticator mobile application, or voice call to a mobile or landline.