show password 3sec on plaintext