Must be at least 8 characters and include: uppercase letter, lowercase letter, number, and special character (!@#$%&* etc.)