At least 8 characters, with one uppercase letter, one number, and one special character (e.g. !@#$%).