It is not easy unless the owner leak it himself, the installer risks losing his job exposing his worksheet or an outsider get his hands on your router/your handphone to access your app behind your back.

In fact, no one will steal password because upon detection of 2 devices connecting simultaneously your account will be temporarily locked and it's a matter of time the owner who pays for it will phone up complaining that he/she cannot connect from his place.

The investigation will ensue and the person who stole it will risk police knocking on his door because they can trace up to where the fibre modem/ONT is connecting from.This is not unlike you can hide behind a VPN/secured network to conceal your origin.

All routers must connect through a fibre modem/ONT so stolen accounts can be traced right till the TM HSBB port itself if needed.

I have a bad feeling there are many who have this BRIGHT idea of trying to use their Maxis fibre account to try connecting through a TM HSBB port back at their kampungs. Be careful because the ISP can detect change of your fibre modem/ONT ID and your account will be locked temporarily. The ISP makes it very troublesome  for you to reset back the account to discourage you from attempting to move your account to somewhere else without their knowledge.

Despite being allowed to use different routers, you still connect out through the same ONT/fibre modem, that's where you can't LIE.This is what is known as a HSBB port, in which you still have to pass through to get connected.

I've been told that it's probably because me and my brother connected to the same call station. This is what the CS told me, which is why I am able to login using my brother's WAN ID and none of us got blocked. I believe from my understanding here, only when connecting to different call stations (i.e server) using the same login, only then they will be able to detect it.

My brother lives near to me, just the next section, hence why I can use his WAN ID, and none of us got blocked. From his explanation, it seems like that way, they are not seeing 2 connections from 1 WAN ID, as it's connected to the same call station.

The other person using my ID is in Serdang, hence they can detect it and the block takes place immediately. When they disconnect the other user, I am able to login immediately.