Yes: This is same for me. If the password is saved in the field beforehand, SSLstrip does not decode it. If the password is entered into the field in real-time, Ettercap will capture it and SSLstrip will decode it. I believe this is because the P/W is NOT being relayed/sent in real-time as it is already stored for use. Please correct me if I am wrong in this assumption. lost_bro