How can they possibly login without the password being available to them?