Passwords must contain at least eight characters, including at least 1 letter and 1 number.