flagging system and password delay