Password must be at least 8 characters, include one uppercase letter (A–Z), and at least two digits (0–9).