passwords and verification codes are now just numeric