List the exact rules — password/email/phone requirements vary by product. Ask for the per-rule breakdown so users get helpful feedback, not just 'invalid'.