Check the password length
Check for uppercase letters
Check for lowercase letters
Check for numbers
Check for special characters
Compare against the required password policy
Verify the password is not empty
Verify the password matches the confirmation field
Check for common or weak passwords
Check for spaces or invalid characters
Validate the password against stored hash if authenticating
Ensure the password has not been reused if history is enforced