That's interesting and I wonder how they do it. Nevertheless this isn't good as it offers a false security sense since the end result is similar to using a master password which is the same as the login password.