A set of rules and guidelines that define the requirements for creating, managing, and changing passwords to ensure strong authentication and reduce the risk of credential compromise.