Password must be ≥8 characters, include letters and digits, at least one uppercase letter, and one special character (-, #, @, _).