Actually, thats where the bug is from. The VIE subgame, all version of it since forever, always forward the whole password field upon a new-name creation. Thats where this problem occurs. It should remove the *XXX from the password, but doesn't. So it isn't Priit's bug, he just never removed it because he probably doesn't know it exists.