<div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">that is true for the document that is protected by the password. but in practice that same password may not only give access to that one document, but also let an attacker do other nefarious things like log on to twitter and impersonate the user's cat. </blockquote></div> Hmm, but why use password-protected documents only for yourself? No idea, but isn't it more likely that such documents are passed between *several* people? Thus making it less likely one would use some important personal password to protect it? Unless one also wants the other people to be able to impersonate oneself on twitter etc. But whatever, sure, if there is a strong feeling that erasing password strings from memory does improve "security", I am not going to argue any more. Especially as I guess we want to avoid giving any impression that we would be intentionally weakening "security", real or not... that would be bad publicity. --tml