hiding the password file