IBPF passwords must contain at least one uppercase letter, one lowercase letter, one digit, one punctuation mark, and be a total of nine (9) characters. Additionally, when a user updates his/her password, the password can not match previous passwords.