• At least 12 characters
  • At least one uppercase letter
  • At least one lowercase letter
  • At least one number
  • Not from a known data breach (checked via HaveIBeenPwned)