Be sure to include symbols

from here

Password policies frequently are so needlessly arcane they might as well be from an alien language.