a note about passwords