But even if you're typing your password in, malware could just log your keys. If malware is on your box, the game is over.