You've probably thought of this but I'll write it just in case.
Instead of doing `if userInput == correctPass: ...` do `if hash(userInput) == hashOfCorrectPass: ...`.
Hashes are, as far as I know, irreversible (unless you feel like brute-forcing it), so you can hide Patreon codes and chest passwords this way.