Actually, they can, and can even record your entire browsing session down to your mouse movements - Session recordings show you everything a user sees in their browser.. That's why on reputable websites, your password is shown as dots - otherwise there is a risk - nefarious or otherwise - of it being recorded.