Re: Dunce Cap tip
"How come then does the NatWest server know individual letters of my password when it prompts me for a random selection of them at each login?"
Possibly it created hashes for each of the combinations it might ask you and stored those.