How do you feel about randomizing the password char :?. Even when I don't think it's going to help a lot to prevent security products from detecting these fakes logins something is something :P