I have never looked into what characters can and can't be used for passwords.
if for example, i wanted to constrain the user to use only alphanumeric characters...assuming those are legal?) any tips on how best to do that?
You can use this expression in a script or validation calculation to see if any non-alphanumeric characters were used:
PasswordField = Filter(Upper ( PasswordField ) ; "ABCDEFGHIJKLMNOPQRSTUVWXYZ9876543210")
Upper maps lower case letters into upper to make for shorter filter string. You can choose to include more characters in this test by including them in the filter string.
thanks phil... that is exactly what i needed. i wasn't familiar with the "filter" or "upper" functions before.