Use explode() with limit=2 because the password can contain `:`?