Guys, stop mining off the web based client. follow the instructions and download the java client and run locally
you are 100% nuts putting in your passphase into a remote host in the first place. Even when using HTTPS/SSL/TLS, that remote host is able to see your passphrase once decrypted off the network
stahp