My password strength criteria is as below :
(!@#$&*)
I would suggest adding
(?!.*pass|.*word|.*1234|.*qwer|.*asdf) exclude common passwords