Working injectable passwords