you must never tell anyone your password