3-40 characters — letters, digits, space . _ - @

Required — digits only, no country code here.

At least 8 characters with 1 special character (@ # ! $ …)