When I went on the Smart Tuition parent portal as an actual parent to set up
my account, I was surprised to find that my password options were limited to
uppercase letter, lowercase letters, and numerals. While the other
requirements your system imposes are in line with current best practices
with regard to online password formatting, the fact that your system doesn't
at least support special characters (that is, allow the entire ASCII set) is
a notable failing. Even if it doesn't require it of users, to allow them
would be an important improvement that would keep data secure, and also ease people's minds about data being secure.