There are two methods through which we ensure the same. In the first method, we only ask for the email IDs and do not ask for the passwords. The second method can be executed through our dashboard, where we have the feature of approval. It requires the approval of any higher authority person to run the simulation. The authorized person can ensure that the employees' passwords are not being saved by unticking the 'Capture Credentials' checkbox before running the campaign.