It should consist of 8-40 characters, including at least one uppercase and lowercase letter and a number.