5 ms·
This raises the interesting question of why we obscure the input when changing passwords. Showing the new password would allow people to check and correct it, s
by foxylad 10y ago
This raises the interesting question of why we obscure the input when changing passwords. Showing the new password would allow people to check and correct it, so you'd only need one input.
Given that the contents of a password input can easily be revealed, the only security obscuring the input provides is from an attacker who can see the screen but not the keyboard, and has no physical access to the device - a pretty limited threat pool.
I guess the answer is that users expect passwords to be hidden. So we make their lives more difficult purely to keep them happy.
- a13xb 10y agoI think the original intent of obscuring input password is to counter shoulder surfing.
- Frank2312 10y agoIE/Edge have at least one thing good about them : you can click on a little eye icon to the right of the obfuscated field to reveal the text in the field until you release the mouse button.
- kevincox 10y agoShowing the password can be nice in situations but I doubt I would catch most typos but re-reading my password. My eyes often see what my brain expects to see.