Does everything have to be made painfully obvious for you kids?
You would use the password revealer after obtaining the asterisks from other people's accounts, either by sending them a malicious .exe or by binding such a thing to a .jpeg *or whatever.*
Yea, it is actually spelt "Asterisk."
EDIT: Your webcomic is terrible. I suggest that you delete it before more people mock you.