checkpoint: password encoder listener