must be at least 8 characters long, contain at least one lower-case letter, an upper-case letter and a number. (a-z, A-Z, 0-9, ! @ # $ % ^ & * )