align with the convention of testing passwords