new attempt with empty password