Password must be at least 8 characters and include both letters and numbers.