Is the page your playing with HTTP or HTTPS

Most Behind Asterisk apps work against locally stored passes.. if it isn't stored locally you need to go to plan B and in your situation the pass isn't local to you. that also means it won't be in the page source

C&P the asterisks to try and crack... damned never even thought of that.. must do that next time I am trying to crack a password.. I've been doing it the hard way for too long.

BTW: the security feature is.. The password is NOT sent to your PC in any way shape or form by the site.. what you have there are plain old asterisks..nothing hidden behind them.. so many of the simple trick won't work..