Link Details

Link 198381 thumbnail
User 111696 avatar

By bloid
via theregister.co.uk
Published: Jul 02 2009 / 04:35

Websites should stop masking passwords as users type because it does not improve security and makes websites harder to use, according to two of the technology world's leading thinkers.
  • 5
  • 11
  • 1435
  • 216

Comments

Add your comment
User 254327 avatar

xcdesz replied ago:

0 votes Vote down Vote up Reply

Go ahead and build your site where the password is not masked. See how many complaints you get then..

User 355617 avatar

piccoloprincipe replied ago:

0 votes Vote down Vote up Reply

When my professor enter his password and the screen is projected on the wall he's not of the same idea...

User 224257 avatar

wekempf replied ago:

0 votes Vote down Vote up Reply

"It's therefore worth offering them a checkbox to have their passwords masked; for high-risk applications, such as bank accounts, you might even check this box by default," he suggests. "In cases where there's a tension between security and usability, sometimes security should win."

I laughed out loud when I first read Nielson's post a few days ago. However, once you stop and think about it, he's got a point that's worth evaluation and research.

Add your comment


Html tags not supported. Reply is editable for 5 minutes. Use [code lang="java|ruby|sql|css|xml"][/code] to post code snippets.