new password (file) handling