if you're really concerned, i would ask for university's policy on using keystroke logger. i don't know how the rule has changed since patriot act, but as far as i could remember with the 1984 electronic privacy act or something, where they cannot know your personal email password outside of university, since this is unrelated to school.

sorry if i misquoted anything, but i'll brush up on the current law and update everyone if anything is different.

w0rm3y