Usernames can only contain letters, digits, and underscores, and should be between 3 and 15 characters long. Passwords should be at least 8 characters.