Hi a warm welcome to the forums.
So that no one misunderstands your statement, you are (were) asked for 2 characters from your password (security code), not the whole of it as your post could be read to infer.
This is much the same as banking systems (either on the phone or on a website) also ask you for two characters out of the 8+ character code / password.
Superusers are not staff, but they do have a direct line of communication into the business in order to raise issues, concerns and feedback from the community.
