Password policy: minimum 8 characters; must include uppercase, lowercase, number, and special character.