> On mobile, browsers briefly show the most recent character typed. There's no reason this couldn't be extended to desktop. I should against it. On mobile dev

> On mobile, browsers briefly show the most recent character typed. There's no reason this couldn't be extended to desktop. I should against it. On mobile device, anyway we use software keyboard to input so we must hide display from others when input password. So displaying last character is harmless. OTOH desktop users sometimes can't hide their display from others, and they type via keyboard. So always displaying last character isn't good for security. Eye button for selectively showing password field is fine. Yes Caps is still problem if user never checked by clicking eye button, but still what's the point to adopt confirm field? I agree that ideally most developer don't have to care about that but browser should.