why is a password needed?