A user can set a very weak password as their account password (examples: "1", "123", "password")
I suggest validation including (but not limited to):
- at least 8 letters
- capital and non capital letters
- at least one numbers
- at least one special character (".","/"."?")