why do you need one, and one to steal what kind of passwords?