The code seems right to me. One thing though, are you using that with ASP.Net? If so, could the posted password change of a user change depending on OS default locale and browser settings?