Client: Make sure I’m able to access all my site’s users passwords.
Me: That’s not ethical, or a good idea. Also, the passwords are hashed and stored in a database somewhere, so we really can’t see them.
Client: I need to see how they’re using the site, so I need their passwords to login to their account to roam around in their account area.
Me: I really can’t recommend that, and their are other ways to access their use patterns without breaking their trust.
Client: Look, I’m paying you to do this. Get those passwords.