password hide fixed, package site included