3-32 characters, letters, numbers, and underscores only

Used for account recovery

At least 8 characters with uppercase, lowercase, and number