return timeout when no password is set