fix: mark password