Your password may not include the characters @, &, “, ‘, #, <space>.
Your password may not be a previously used password.
The fact that my university restricts passwords like this boggles my mind. Why the random character restrictions? There is no reason why you can’t store those characters in a database. Especially hashed. Please tell me you are hashing my password and not storing it plaintext.