Make genotp more clearly state that the password can be used once but allows permanent access (sorry for not making this clear earlier.) Use a slightly longer password, and allow uppercase characters except for some that could be ambiguous