Password must be at least 8 chars, include uppercase, lowercase, number, and one special character (e.g. @ # $).