I did not bypass it. I only found out the name by pasting the new url somewhere that allows link previewing, for example, the messages app in apple. it's a bit hard to explain but uhh you know when you send someone a link, and the link shows a little icon of the site and the name of the site? yeah thats what i did. the icon was regular itch io but the name was ELEMENTIBOX - Mild As Spring... Refreshed
basically the password hides the game itself but the metadata doesn't hide the name of it