Minimum password requirements for Active Directory and Office 365
Password cannot contain the user's account name or parts of the user's full name that exceed two consecutive characters. Example: If the user's name is Allen, the password cannot contain "all" or "len" or "lle" Be at least eight characters in length ...