Passwords must include at least one capital letter, one lower case letter, a number and a special character (@#$%!-_) and should be at least 8 characters long.