visible password is optional