Yeah they can ask for passwords but I've seen so many people work around this by pretending they forgot. Because at that point what are they going to do.