Password must be 8–16 characters and include at least one uppercase letter, one lowercase letter, one number, and one symbol (!@#$%^&*).