Click your cursor in the Body field of the message
This box may not be labelled as anything but will always be the largest block of white space on the new message template. Your email ID and its password are your own confidential information. No company s employee will ever ask you for your password in an unsolicited phone call or email message. The sender is a hacker, no doubt. S/he wants to gain access to your account and send spam emails, like asking money from your contacts or make an unauthorized third party send spam or fraudulent emails to your contact list.