The answer to the security question must be 5 characters at minimum
The username or password can not be used as the answer to the security question
The answer to the security question can't be found on the commonly used password list
The word or phrase must be unique to you
...