use masterpassword as hash base instead if signature