fixed pw protection