Passwords must be at least 8 characters and contain at least one uppercase letter, one lowercase letter, and one number.