Sorry if this has been beaten to death.
A password can contain capital and lowercase letters, digits, and underscores.
$63^8$ total passwords, correct?
If we add the stipulation that the first character cannot be a digit-- why wouldn't the number of illegal passwords be $10*63^7$, resulting in $63^8-10*63^7$ legal passwords?
Because there are $10$ options for the first character of the password if it starts with a digit; and for the rest of the characters, there are $63$ options still so $10 \cdot 63^7$ is the number of illegal passwords.