I have entered account numbers and passwords in the vault, have not put any information in the Trusted Sites tab, and have selected High as level of protection. When I try to email a password it shows up in the sent email as ***** which is good. However, when I go to my bank online site and key in the password, it goes right in. ZA does not ask for permission or attempt to block it. I thought ZA would prvent the password from going into a web form if I selected "High" level of protection. Can any one tell me what I am doing wrong?