: Administrators can now enforce a minimum number of new characters in a password reset, providing more granular control over password strength than the previous "4 unique characters" rule.