The plugin actually alerts you the moment you press down the last key on your keyboard, before you could even press enter, so you don't even get a chance to sub

The plugin actually alerts you the moment you press down the last key on your keyboard, before you could even press enter, so you don't even get a chance to submit the password. But even if you assume at that moment the attacker has your password... I had seen gmail takeovers live and Google's authentication system allows you to recover an account even after it was taken over as long as you still have the old methods of authentication and you are within an unspecified timeframe. Of course you will have to spend the day cleaning up your email filters and apologizing all your contacts, but at least you will have your account back.