Passwords must conform to password format rules, which govern the type and number of characters allowed in the password.