Strapi password policy (Admin auth)

What even are the default rules?