Just as a side note, exit node operators can't see passwords if you're using HTTPS(which you probably should be using at all times anyways) unless they have managed to get a certificate issued for the website you are connecting to (which is incredibly rare.)