Password must be at least 8 characters and cannot be a commonly used or previously compromised password.