Must be 8+ chars with at least 1 uppercase, 1 lowercase, and 1 special character (!@#$%^&*).