# Why are passwords not visible?

**URL:** https://boards.straightdope.com/t/why-are-passwords-not-visible/719245
**Category:** Factual Questions
**Created:** [May 4, 2015, 2:48pm UTC](https://boards.straightdope.com/t/why-are-passwords-not-visible/719245 "2015-05-04T14:48:58Z")
**Posts on this page:** 13
**Page:** 1

<div class="post-metadata">

### Author: ![KevTheGreen](https://avatars.discourse-cdn.com/v4/letter/k/a9adbd/32.png) [@KevTheGreen](https://boards.straightdope.com/u/KevTheGreen)
#### Post date: [May 4, 2015, 2:48pm UTC](https://boards.straightdope.com/t/why-are-passwords-not-visible/719245/1 "2015-05-04T14:48:58Z")

</div>

Why am I unable to see what letters I type when I input my password? I’m a lousy typist and it’s frustrating to have to keep blindly entering a password. I can sort of see why this would be important in an office, but I’m sitting at home by myself.

Is this actually a legitimate security measure? Is it simply an archaic holdover? And, am I the only one bugged by this? 😕

---

<div class="post-metadata">

### Author: ![Turek](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/turek/32/18782_2.png) [@Turek](https://boards.straightdope.com/u/Turek)
#### Post date: [May 4, 2015, 2:55pm UTC](https://boards.straightdope.com/t/why-are-passwords-not-visible/719245/2 "2015-05-04T14:55:48Z")

</div>

So someone can’t look over your shoulder and see what you’re typing. And the form has absolutely no idea that you’re home alone.

---

<div class="post-metadata">

### Author: ![johnpost](https://avatars.discourse-cdn.com/v4/letter/j/f17d59/32.png) [@johnpost](https://boards.straightdope.com/u/johnpost)
#### Post date: [May 4, 2015, 3:19pm UTC](https://boards.straightdope.com/t/why-are-passwords-not-visible/719245/3 "2015-05-04T15:19:24Z")

</div>

one finger data entry can help having a correct entry.

---

<div class="post-metadata">

### Author: ![bob\_2](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/bob_2/32/3341_2.png) [@bob\_2](https://boards.straightdope.com/u/bob_2)
#### Post date: [May 4, 2015, 3:22pm UTC](https://boards.straightdope.com/t/why-are-passwords-not-visible/719245/4 "2015-05-04T15:22:23Z")

</div>

There are sites that give you the option of seeing the password, but only a few,

---

<div class="post-metadata">

### Author: ![BrotherCadfael](https://avatars.discourse-cdn.com/v4/letter/b/977dab/32.png) [@BrotherCadfael](https://boards.straightdope.com/u/BrotherCadfael)
#### Post date: [May 4, 2015, 3:32pm UTC](https://boards.straightdope.com/t/why-are-passwords-not-visible/719245/5 "2015-05-04T15:32:01Z")

</div>

Get a password manager. I use LastPass.

---

<div class="post-metadata">

### Author: ![ftg](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/ftg/32/2801_2.png) [@ftg](https://boards.straightdope.com/u/ftg)
#### Post date: [May 4, 2015, 3:45pm UTC](https://boards.straightdope.com/t/why-are-passwords-not-visible/719245/6 "2015-05-04T15:45:22Z")

</div>

I added “Show Password Field” to Firefox. But it doesn’t work everywhere. (Bleeping Flash!)

And yet, even a utility like this specifically made to show your password blanks out each letter after a second! :smack:

Every site and utility should allow the user to see the whole password indefinitely if they choose. No one’s looking over my shoulder on this machine.

(While there are “screen grab” malware utilities that can see your password then if you have it made visible. If you’ve got malware on your machine, there’s a ton of easier ways to grab passwords.)

---

<div class="post-metadata">

### Author: ![trmptgn](https://avatars.discourse-cdn.com/v4/letter/t/53a042/32.png) [@trmptgn](https://boards.straightdope.com/u/trmptgn)
#### Post date: [May 5, 2015, 3:55pm UTC](https://boards.straightdope.com/t/why-are-passwords-not-visible/719245/7 "2015-05-05T15:55:21Z")

</div>

I work as a front-end developer, and previously I’ve done a lot of roles in user interface design. A lot of UI designers have talked about this issue, and the usability problems with the current forms.

Good developers are usually very security conscious. They are also engineering minded, so they tend to have a black and white view of how a page is constructed. A common stereotype of a software engineer building something without a designer is that it will work, but it won’t be pretty or easy to use. They care about functionality first and foremost.

The password box(es) are hidden in case someone is looking over your shoulder. Since you can’t see it, they make you type it in twice most of the time. Smartphones usually show the last letter due to the possibility of you typing it wrong and the more likely possibility of someone looking over your shoulder.

This is bad for usability, as you have already found out. As such, a growing trend is to default to showing your full password while having a prominent checkbox for the option of obscuring it. This is being used a lot on mobile phones as well, although obscuring on the mobile phone usually means revealing just the last character. Some default to obscuring with the checkbox to reveal the password.

The advantage of showing it is simply that it helps you avoid typos. The disadvantage is a slight security loss since you may start typing half of your password before realizing it is showing for anyone to see.

I doubt you’ll see the ‘default to show’ method used on many high security applications (banks, government, health) any time soon.

---

<div class="post-metadata">

### Author: ![ralph124c](https://avatars.discourse-cdn.com/v4/letter/r/8797f3/32.png) [@ralph124c](https://boards.straightdope.com/u/ralph124c)
#### Post date: [May 5, 2015, 4:14pm UTC](https://boards.straightdope.com/t/why-are-passwords-not-visible/719245/8 "2015-05-05T16:14:51Z")

</div>

A question: what good is a concealed PW if your machine has a keystroke logger malware program in it?

---

<div class="post-metadata">

### Author: ![Turek](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/turek/32/18782_2.png) [@Turek](https://boards.straightdope.com/u/Turek)
#### Post date: [May 5, 2015, 4:20pm UTC](https://boards.straightdope.com/t/why-are-passwords-not-visible/719245/9 "2015-05-05T16:20:39Z")

</div>

> [@ralph124c](#):
>
> A question: what good is a concealed PW if your machine has a keystroke logger malware program in it?

None.

But then, what good is having a lock on your door when your house has windows someone can just smash to get in?

Same principal. You make theft as difficult as possible while still maintaining usability.

---

<div class="post-metadata">

### Author: ![Leo\_Bloom](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/leo_bloom/32/10377_2.png) [@Leo\_Bloom](https://boards.straightdope.com/u/Leo_Bloom)
#### Post date: [May 6, 2015, 12:25am UTC](https://boards.straightdope.com/t/why-are-passwords-not-visible/719245/10 "2015-05-06T00:25:25Z")

</div>

- Psst…there’s this new guy **KevTheGreen** …seems OK…hold off on putting his

Oh, Herro **KevTheGreen**! Welcome aboard.

---

<div class="post-metadata">

### Author: ![Musicat](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/musicat/32/20189_2.png) [@Musicat](https://boards.straightdope.com/u/Musicat)
#### Post date: [May 6, 2015, 12:33am UTC](https://boards.straightdope.com/t/why-are-passwords-not-visible/719245/11 "2015-05-06T00:33:01Z")

</div>

> [@Turek](#):
>
> Same principal. You make theft as difficult as possible while still maintaining usability.

Your principal was/is your super-teacher. The principle is what you are describing.  
\*  
– Grammar-Nazi since 1973\*

---

<div class="post-metadata">

### Author: ![KevTheGreen](https://avatars.discourse-cdn.com/v4/letter/k/a9adbd/32.png) [@KevTheGreen](https://boards.straightdope.com/u/KevTheGreen)
#### Post date: [May 6, 2015, 1:13am UTC](https://boards.straightdope.com/t/why-are-passwords-not-visible/719245/12 "2015-05-06T01:13:30Z")

</div>

Mostly I was curious if this bugged anyone else. It just seemed like a hold-over from when most computer use was in offices or school labs. I mean, if someone sneaks up behind me while I’m supposed to be alone in my apartment, I’ve probably got bigger problems than password security. Anyway, trmptgn’s reply was especially enlightening. Thanks all.

---

<div class="post-metadata">

### Author: ![Askance](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/askance/32/8281_2.png) [@Askance](https://boards.straightdope.com/u/Askance)
#### Post date: [May 6, 2015, 1:21am UTC](https://boards.straightdope.com/t/why-are-passwords-not-visible/719245/13 "2015-05-06T01:21:49Z")

</div>

In iOS the most recently typed character is visible, and is replaced with an \* when you type the next one. It helps.
