[konidias]

At the moment it's very easy to steal someones pass.. just make a program that grabs the registry info from Graal and have that info sent to an email address.. then you can just put that info into your own registry using regedit.

Then if you get one of those encrypted pass decoders they can uncover the "******" in the Graal password box, so you can get the real pass instead of the encoded one.

There need's to be a different form of password security though, I agree.