The password must be a combination of 6 through 15 case-sensitive letters, numbers, and special characters (only the first 8 are used, but 15 are available for users who want longer passwords, which may be easier for them to remember).
Individual users can change passwords after the first login.