should not store password in notes