use a long pass phrase, 20 chars min