Yes, you need to follow the below password change policy:
- Passwords must have at least 12 characters.
- Passwords cannot contain the username.
- Passwords must include the four available character types: lowercase letters, uppercase letters, numbers, and symbols. Symbols must include any one of [!"#$%&'()*+,./:;<=>?@\^_`{|}~-].