manual password check