8–16 characters, including at least one number, one uppercase letter, one lowercase letter, and one symbol (e.g., @, #, $, %, !)