8 characters min (at least 1 upper case & 1 symbol)