Treat no input as "no password" rather than empty string