Every password is validated against six rules in real time — no post-submit surprises, no guessing which requirement you missed.