change 12 to MAX_PASSWORD_SIZE