8 characters minimum must include at least one lowercase letter, one uppercase letter, one digit, and a special character