A complex password is one that has multiple character sets. The NYC DOE password policy states that a password MUST be at least 8 characters long and have a combination of upper case, lower case and numeric characters.