password -> plainPassword