4–20 characters, must start with a letter, can contain digits (0-9) and underscore (_)