When I go to create a new user, here are the requirements listed on the new user's profile (they come up when you try to set a new password for the user):
Your password must be at least 8 characters and contain two of the following types of characters:
- Uppercase Letters
- Lowercase Letters
- Numbers
- Special Characters (i.e. ! @ # $ % etc.)