there must be a password, and they must be the same