in that case all variants of passwords would work which does not happen