By bloid
via theregister.co.uk
Published: Jul 02 2009 / 04:35
Websites should stop masking passwords as users type because it does not improve security and makes websites harder to use, according to two of the technology world's leading thinkers.
Comments
xcdesz replied ago:
Go ahead and build your site where the password is not masked. See how many complaints you get then..
piccoloprincipe replied ago:
When my professor enter his password and the screen is projected on the wall he's not of the same idea...
wekempf replied ago:
"It's therefore worth offering them a checkbox to have their passwords masked; for high-risk applications, such as bank accounts, you might even check this box by default," he suggests. "In cases where there's a tension between security and usability, sometimes security should win."
I laughed out loud when I first read Nielson's post a few days ago. However, once you stop and think about it, he's got a point that's worth evaluation and research.
Voters For This Link (5)
Voters Against This Link (11)