Functions should be self-contained. Always. Of course, if you *do* insist on breaking the rules, just Dim the variable outside of any sub or function and it is global. You can't control whether or not ...
Warning: The amount I know about web page scripting could fit in the palm of a baby's hand. VBScript on 2000 does not support password masking intrinsically. There is an example in Microsoft's Script ...