TAGs: unencrypted passwords