The new password must be at least 8 characters long, include at least one number and one letter, and can only contain letters, numbers, and underscores (_ hyphen).