also collect password settings