return nil for non existing passwords