Please add additional password set-up instructions on the initial screen donors see when they are establishing their access. It might also need to be added on the reset password page. Something along the lines of: 

Passwords MUST:

• Contain eight characters or more
• Contain characters from two of the following three character classes:
1. Capital/uppercase letter
2. Numeric (i.e. 0-9)
3. Punctuation or other special characters (i.e. !@#$%^&*)