Inline validation
Check input as people type and explain how to fix a problem in place, rather than rejecting everything only on submit.
Use at least 8 characters
Type a password: it's checked as you goOne of 220 cards in the Apple HIG deck. Browse every card.