But... *how* is password? Secure enough?