Yesterday I created a directory (not in the public folder) and used the security service of Bluehost to password protect the directory. When entered the password for a new user, (password showed as dots) created the password but exposed the password on the next screen with the username.