fix: only the first password letter was used

fix: only the first password letter was used #614