Password length requirement is too long.

Drop password length requirement down from 12 characters to a min of 8. This will cause user frustration as not everyone has long passwords.

Drop max password entries from 5 to 3. If you can't remember your password after 3 tries, just reset it, it's easier.