Must be at least 8 characters long with a mix of uppercase, lowercase, digits and special characters.