By default it requires a password that's at least seven characters long and includes one non-alphanumeric character such as a pound sign, an ampersand or something else that is not a letter or a number. 