The run a website which serves you the password prompt.
Do you inspect this source code every single time you login?