The instructions to recover disabled passwords using the password.php download states "It is imperative that you delete the file from your server following use." This file is used in the root directory and should be removed after use.
However, I noticed that my vsadmin folder and security vsadmin folder both have a "password.php" file them, and they look very similar to the latest download except for the reCaptcha removal features. Should these also be removed?