New passwords need at least 8 characters, with an upper-case letter, a lower-case letter, and a number.