problem

Currently the only password rule is to have 8 characters.

solution

Should be at least 12 characters. Additional complexity with upper/lowecase letters, special chars may reduce security since users then tend to note the password down.

A string check should prevent for using "translate5" "password" "username" etc as simple password then too.

Check for libraries.