password is now encrypted instead of being stored plaintext on phone