diff --git a/src/app/api/customer/AuthController.ts b/src/app/api/customer/AuthController.ts
index cbcdf01f..175806a8 100644
--- a/src/app/api/customer/AuthController.ts
+++ b/src/app/api/customer/AuthController.ts
@@ -139,7 +139,7 @@ export default class AuthController extends ApiController {
 			return;
 		}
 
-		const passwordRegex = new RegExp(/^(?=.*[a-z])(?=.*[A-Z])(?=.*\d)[A-Za-z\d@$!%*?&]{8,}$/);
+		const passwordRegex = new RegExp(/^(?=.*[a-z])(?=.*[A-Z])(?=.*\d)[A-Za-z\d@$!%*?&_\\-]{8,}$/);
 		if (!passwordRegex.test(password)) {
 			this.httpBadRequest(response, "Password must contain at least 8 characters, 1 uppercase, 1 lowercase and 1 number");
 			return;