Password runtime qualification