more password fields should just show you the regex it needs to match

@bcrypt
That's not a full description of the requirements. That should be:

At least one lowercase letter, appearing before an uppercase letter, appearing before a number, appearing before one special character (of the list "~!@#$%*&;:.?>+-=_"), which must not be in the last 8 characters of the password.