loop over the password