Valid password must be minimum of 8 characters in length, contain mix of alphabetic characters and numbers, and not include the user id.
https://www.staffs.ac.uk/data-protection/student-privacy-statement.jsp