Looks OK, and easy to follow.
couple of minor things
1. tfPassword.requestFocus();
from the
java api docs for requestFocus():
"Because the focus behavior of this method is platform-dependent, developers
are strongly encouraged to use requestFocusInWindow when possible."
2. passWord = tfPassword.getText();
from the java api docs for getText():
"For security reasons, this method is deprecated. Use the * getPassword
method instead."
the return value of getPassword() is a character array, which is easily
convertable to a
string - one of the string constructors accepts a character
array as an argument.