why is it so hard to get passwords