Must include one number, one upper and lower case letter and be between 8 and 40 characters /^(?=.*\d)(?=.*?[a-z])(?=.*?[A-Z]).{8,40}$/