Use the same email format expected by the platform (e.g. includes a domain such as .com).

Passwords must be at least 8 characters to match backend validation.