3 ms·
Why are cleartext password fields bad practice? How many accounts are actually compromised via shoulder surfing? They're especially annoying on mobile phones.
by shock3naw 14y ago
Why are cleartext password fields bad practice? How many accounts are actually compromised via shoulder surfing? They're especially annoying on mobile phones.
edit: Since there are password fields, I guess the question should have been "How many accounts _would_ be compromised by shoulder surfing?" I bet it's a truly insignificant number.
- DeepDuh 14y ago1) As OP has pointed out, security is not just about effective security, it's also about the perceived one. Cleartext passwords are so unusual it makes me question as a user, how things are handled in the backend. 2) I don't see the problem on mobiles. Not sure about Android or WP but at least on iOS I always see the last character that is entered. Still vulnerable to shoulder peeking but not as bad as cleartext.