Choose your rules to build a written password policy you can paste into an employee handbook or security doc.