Use a complemented transliteration in scalar or boolean context:

if ( $password =~ tr/A-Za-z0-9//c ) {
    warn "Bad characters in <$password>\n";
}
[download]

The question of "sensibility" is left to the implementor. :)

Update: AidanLee found an extra right paren which has since been recycled. Oops.