strong(pw)
(?=...)
strong('Passw0rd')
True
All four rules hold.
strong('password')
False
No uppercase, no digit.
r'(?=.*[a-z])(?=.*[A-Z])(?=.*\d).{8,}'.
Lookaheads all anchor at position 0.