Password length and complexity $-$ How long should passwords be$?$ Must they contain any special case, characters, etc?, Will you require your users to change their passwords? If so how often will you require them to change them, can they use old passwords?