Why is password excluded here?