password mask size equals password size