Revert "No password stealing"

This reverts commit 48f59067e2c859f485d01838850b4a971c70e702.