setting master password and timeout