"If asked for your password, do not give it out. Real websites will never ask you for your password. (Login forms excepted, of course.)" This is confusing, in

"If asked for your password, do not give it out. Real websites will never ask you for your password. (Login forms excepted, of course.)" This is confusing, in my opinion. It's hard to explain the difference between a login form and a page asking for your password, so it's probably worth just leaving this out. Any phisher worth his salt makes the page asking for a password look like a login form anyway.