You can enforce specific rules when validating user-supplied passwords by using the Password::defaults method. It includes options for requiring letters, numbers, symbols, and more.
class AppServiceProvider{ public function boot(): void { Password::defaults(function () { return Password::min(12) ->letters() ->numbers() ->symbols() ->mixedCase() ->uncompromised(); }) }} request()->validate([ ['password' => ['required', Password::defaults()]]])
Tip given by @mattkingshott