We suggest not setting the password policy too complex as you will receive more help requests.
When setting time frames on password policies with timed login lockouts, note that an applicant logging in close to your application deadlines may be locked out and not able to log back in within the allotted.