Password must have:

At least 8 characters
At least one letter (a–z)
At least one number (0–9)
At least one special character (!@#$%^&*)