started at password username length thingy