Must be at least 8 characters long and include at least one special character (!@#$%^&*).