When new users try to register and create a password, there is no indication of the password requirements. A user must create a password and have it rejected to find what is missing. Also, only one requirement shows up at a time, so they might have to try 4 separate times to find all of them. For instance, if they use "deskpro", they will first be informed that they need 8 letters. When they update to "deskproa", they will be informed that they need a capital letter as well. When they update to "Deskproa", they will be informed they also need a number. When they update to "Deskpro0", they will be informed that they need a symbol. Finally, on the fifth try, they would succeed with "DeskPro0@".