Min 8 characters: uppercase, lowercase, digit, and special character (!@#$%^&*)