Copied password.go from comeback.
Turned into a proper package.