* the password has to contain an upper character
* the password has to contain an digit
* the password has to be 8 characters or more.
Here is an example for checking words which contain 'a', 'b' and 'c' characters and are between 10 and 100 characters in length:
The example could easily enhanced to match above requirements for passwords.
A real password regex matcher is this one:
It filters passwords with length at least 7 characters (and at most 100), which has at least one upper case (English) and at least one digit.
P.S. This is a way of implementing AND operation in regex.
P.S.2. Here is a link to a perfect online regex validator.