Passwords must be at least eight characters long and include characters from three of the following groups: