Passwords should be no less than three characters and no more than 10, and they should not contain single quotation marks or percentage signs.