/^(?=.*[a-z])(?=.*[A-Z])(?=.*\d).{8,}$/
Secret123aB3defghTr0ub4dor9Lives_cat·secret123SECRET123SecretpassAb1
Password rules with regex lookaheads (and when not to)
How to check \"at least one uppercase letter, one digit, eight characters\" in a single regex with lookaheads, why the order-free version needs them, the traps in the common patterns, and why checking each rule separately is often the better design.
Regex Hunter