be more explicit when data collection and download passwords