8 or more characters; lower and upper case letters (e.g. Aa); digits or special characters (e.g. 123, !@#)