Czar Flavius #1 Javascript should never be used for anything secure. Javascript-based passwords by newbies make me cringe. I've managed to find out someone's sensitive password because of that before - just go to view > page source ;)