Passwords should be 8-16 characters, including at least two elements of numbers, letters, and characters