Password protection testing