I often joke with folks when they are logging in (no, I don’t make it a practice to be near them during this process, it just happens, and I clearly look away in the process) that "I can tell your password by the sound of the keystrokes." I didn’t realize how right I was…
The Freedom to Tinker blog has a post about some research that claims to be able to convert keystroke audio to text. Interesting.