Ok, I read that as "we asked them to enter their password, and 15% of
them typed something in response". I don't see where it says they
verified that this was indeed the person's password.
I'd have typed something in there too; probably "your password".