You could delay the display of the color pattern until the user has stopped keying for a second or so. That way, the shoulder surfer would not get incremental v

You could delay the display of the color pattern until the user has stopped keying for a second or so. That way, the shoulder surfer would not get incremental versions to work from, unless the user types really s l o w l y.