use password encryption