It sounds to me like calling the encryption phrase, a "password" and presenting it as immediately after signing in with Apple is the problem.