fixed password allocation