And if the password were changed? If compromised? We need a way to do this that doesn't involve a password. John mentioned something like SHA256?