use new generated password instead of the secret