Passwords must be 9–15 characters with at least one capital, one lowercase letter, one number and one symbol.