single-file password storage