Password can be null