Password must be 8–16 characters long and include at least one uppercase letter, one lowercase letter, one number, and one special character.