default password: multiple of 3 for base64 to avoid ending in '='