HSA Bank Website→

• Must be minimum 12 characters
• Must not be one of user's past 5 passwords
• Must contain uppercase and lowercase letters
• Must contain a number
• Must not be the same as user's account number or login/username

But also...

• Cannot be longer than 20 characters