[willidiots]

I'm assuming by the same mechanism that offers to save previously-entered passwords. It's always sniffing anything you type into a password field.

[TwoBit]

How would it know it's a password field and not just some text input box that uses * characters?

[joshschreuder]

<input type="password" /> I assume