With the difference that when user types the password it is not displayed on the screen. Server-side generated password must be somehow presented to the user.