Setting the password itself doesn’t work, because phishing links are likely to steal your private key or seed phrase, so we don’t click on unknown links, save the private key and put it out of reach of others. Here are some methods on how to safely set MetaMask, which you can refer to.