must contain at least one number and two asterisks