Passwords are case sensitive, usernames are not.
For example, "77shelley" (without the quote marks) does not meet complexity requirements, but "77shelley**", or "77Shelley" or "77Shelley**" does, provided the user's full name or account name does not include Shelley.
For best security, Webville recommends using a unique password for your email account. Do not use the same password you use for online shopping accounts or any other account. If an online merchant is hacked and your account details from XYZ fall into the wrong hands, you do not want those hackers to gain access to your email password. Many of us store important information in our email, contacts and calendar. This information could be used in an identity theft which could potentially have devastating consequences. Don't let that happen to you - don't use the same password for your email that you use elsewhere. Choose a complex password, unique to this account. Create a password which cannot be surmised by someone who knows a few things about you. The account lockout policy will prevent brute force attacks (robotic guessing of every possible password) but it cannot prevent a smart hacker from trying a few combinations of birthdays, pets names, kids names, zip codes and other obvious giveaways. The Internet is a bad neighborhood, please be safe out there.