don't try password if hash doesn't exist