password instead of abbreviation