Best practices for diplaying the Password Requirements

I am trying to decide which is the best way to display the password rules when a user is changing their password.

There are approximately 4 important password criteria.

Option 1: Place criteria in tooltip, visible when New Password field is focused