3–20 chars. Letters, numbers, underscore only.
Min 8 chars, must include upper, lower, number, special.