Password invalid

My account password is correct, but it says invalid…
(Theres a notice at the top of all pages)

Your forum and Graal account are seperate (security reasons), and your graal account is not made till you visit that link and give your graal account a password (We recommend a seperate password).

The security risk is: Our GServers are Open Source, someone could modify one to collect passwords. The reason we are vulnerable to this, is because the Official Client, sends the password in plain text to the Listserver, and once more to the GServer.