Restricting unauthorized passwords