Password must be at least 10 characters and include at least one special character (e.g. !@#$%^&*).