encrypted PW, generate random string