Passwords must be at least 8 characters, and contain at least 3 of: uppercase (A-Z), lowercase (a-z), digits (0-9), special (! $ # % ^ _)