get default password as empty string