Password must be at least 8 characters, including uppercase, lowercase, number, and special character (!@#$%^&*).