Passwords must be at least 8 characters, including at least one numeric digit, and one non-alphanumeric.