Usernames can only contain letters, digits, underscores, and hyphens, and should be between 3 and 15 characters long. Passwords should be at least 8 characters.