use a bit of color and mask passwords