let password checked with sha256