Must be 8+ characters with a symbol (e.g. !@#$%).