Slight nitpick - they're asking him to enter the password, not disclose it. I'm not sure how much difference it makes but the distinction is specifically mentioned in the article.