Password must be at least 8 characters, include one uppercase letter (A–Z), and two digits (0–9).