Passwords must be at least 8 characters, contain at least a number and letter, and contain a capital letter or special character.