4–20 characters, must start with a letter, can contain digits (0-9) and underscore (_)

✕ At least 8 characters
✕ Must include a number
✕ Must include a special character (!@#$%^&* etc.)