note about password