passwords apply within