That's fine and dandy for someone standing behind you, but this discussion is about computers that have key loggers on them. There are two simple ways of entering a password. Cut and paste from another file, or type it in. So, if you're using cut and paste to prevent potential key loggers from reading your key strokes, the screen captures will show the file that you copied from. If you were crazy, I guess you could write something that would pull a password from a database on a flash drive in such a fashion as to enter the password to the corresponding field but not display the password on the screen. A saner approach would be to start demanding that your e-mail provider/bank offers RSA SecurID devices to interested consumers.