initial implementation for passwords with four chars