some questions about passwords