Q: With a Windows 8 picture password, can you enforce complexity requirements on more than three gestures?

A: Windows 8 allows a picture password to be used, consisting of three gestures, which each could be a point, line, or circle. It's not possible to enforce a certain level of complexity such as requiring a certain number of circles or to require more than three gestures.

You might also look at "Picture Password: Alternative or Gimmick?" And for your end-users, or yourself, I've got an FAQ "Windows 8 Cheat Sheet for Keyboard and Touch" that can be helpful.