At least 16 characters OR at least 8 characters including a number and a letter.