better desciption of password use