Isn't it better to just give a password directly instead of making people guess?