Password Strength Setting is incorrect

I have set the GOOD setting for password strength, which involves these:

  • Special characters (!@#$%^&*)
  • Lower case (a-z), upper case (A-Z) and numbers (0-9)
  • Must have 8 characters in length
  • Non-empty password required

However, a password such as Passw0rd is accepted. If the requirement is to have at a minimum 3 of the 4 types of characters, please show me the following

  1. Where is this made clear on the UI
  2. Which of the slider levels in the password strength slider setting are related by OR versus AND.
  3. Please suggest passwords where the GOOD setting enforces a more complex/secure password compred to the FAIR setting.