See the developer FAQ How do I prevent the capturing of keystrokes when recording a session?