local api, passw enc