solution: STOP HOLDING PASSWORDS. And I'm proud to say #stackoverflow has never held a single password. Ever.