the password should be empty!