/PASSWORD=(password1[,password2])
       /NOPASSWORD

    Specifies up to two passwords for login.  Beginning with OpenVMS
    V9.2, the system allows passwords up to 64 characters in length;
    prior versions supported passwords up to 32 characters in length.
    VSI suggests testing all commonly-used access methods to insure that
    longer passwords are accepted before adopting passwords over 32
    characters in length.

    For accounts without the PWDMIX flag set, passwords can be from 0
    to the maximum (32/64) alphanumeric characters in length. The dollar
    sign ($) and underscore (_) are also permitted. Uppercase and
    lowercase characters are equivalent. All lowercase characters are
    converted to uppercase before the password is encrypted.

    For accounts with the PWDMIX flag set, passwords can be from 0 to the
    maximum number of characters (32/64) consisting of any non-control
    character available from the keyboard.  Alphabetic characters are
    case-sensitive.  While the space and tab characters are permitted,
    VSI suggests not defining passwords containing either character.  To
    preserve case when setting a password, enclose the string in quotes.
    For example: UAF> MODIFY SOMEUSER/PASSWORD="AMixed-CaseSecret!"

    Use the /PASSWORD qualifier as follows:

    o  To set only the first password and clear the second, specify
       /PASSWORD=password.

    o  To set both the first and second password, specify
       /PASSWORD=(password1, password2).

    o  To change the first password without affecting the second,
       specify /PASSWORD=(password, "").

    o  To change the second password without affecting the first,
       specify /PASSWORD=("", password).

    o  To set both passwords to null, specify /NOPASSWORD.

    When you modify a password, the new password expires
    automatically; it is valid only once (unless you specify
    /NOPWDEXPIRED). On login, the user is forced to change the
    password (unless you specify /FLAGS=DISFORCE_PWD_CHANGE).

    Note that the /GENERATE_PASSWORD and /PASSWORD qualifiers are
    mutually exclusive.