still not ideal but better than typing passwords into the message field