Consider the following when working with passwords.

For security reasons, passwords are not generated by the interface. If when an object is being read a blank is displayed for the password you should not necessarily assume that the password is actually empty. If you enter an empty password for a change operation on the object, then the password of the object version that already exists is automatically transferred.

You must enter passwords in plain text. Use the HTTPS protocol for this.