To enforce the password complexity requirement, you need to change the following 2 policiess:

Static Password policy.