generating sub-passwords