attribution and password length back to 6