So, the response should be cautious, not provide the password, and direct the user to appropriate help channels. Need to phrase it in a helpful but secure way.