what happens if someone figured out your master password?