1) "Set additional password strength rules" in Password Rules should be click target. 2) Use Orgs/People id as the "account code" does not user terminology.