Passwords must be at least 8 characters, with at least one number and one letter.