design of password retrival