Passwords need a minimum length (8 to 10 characters is good). Many sites require mixed case, numeric characters, or special symbols in an effort to encourage less guessable passwords.