HTML5 Canvas
Written by: Simon Sarris
Featured Refcardz: Top Refcardz:
  1. Apache Hadoop
  2. Web Driver
  3. MVVM
  4. REST
  5. ADO.NET
  1. HTML5
  2. Ajax
  3. jQuery Selectors
  4. CSS Part 1
  5. Git

Link Details

Open 24/7/365. Never a waiting line! Login and vote now.
Link 198381 thumbnail
User 111696 avatar

By bloid
via theregister.co.uk
Published: Jul 02 2009 / 04:35

Websites should stop masking passwords as users type because it does not improve security and makes websites harder to use, according to two of the technology world's leading thinkers.
  • 5
  • 11
  • 4542
  • 0

Comments

Add your comment
User 254327 avatar

xcdesz replied ago:

0 votes Vote down Vote up Reply

Go ahead and build your site where the password is not masked. See how many complaints you get then..

User 224257 avatar

wekempf replied ago:

0 votes Vote down Vote up Reply

"It's therefore worth offering them a checkbox to have their passwords masked; for high-risk applications, such as bank accounts, you might even check this box by default," he suggests. "In cases where there's a tension between security and usability, sometimes security should win."

I laughed out loud when I first read Nielson's post a few days ago. However, once you stop and think about it, he's got a point that's worth evaluation and research.

Add your comment


Html tags not supported. Reply is editable for 5 minutes. Use [code lang="java|ruby|sql|css|xml"][/code] to post code snippets.