keep real password apart