Why are password fields not masked on WordPress?

• 

  tbessie · Member · Jun 29, 2015 at 7:16 pm

  • Copy link
  • Add topic to favorites

  I just signed up for a WordPress account, and noticed that it doesn’t mask the password field while I’m typing it. This seems extremely unsecure – why is this done this way? Is this an error in your site?

• 

  auxclass · Member · Jun 29, 2015 at 7:23 pm

  • Copy link

  I just logged out and back in and the password for me was masked

  I will flag this for the staff

  Are you asking about the tbessie account? Do you have anything along the line of impaired vision help checked anywhere (not even sure WordPress.COM has that option)

• 

  tbessie · Member · Jun 29, 2015 at 7:37 pm

  • Copy link

  Hi there…

  Thanks for the comment – I just logged out and back in, and now it’s masking the password. Hmm – I wonder why it would not mask it beforehand; I don’t recall clicking on anything having to do with impaired vision. (this *is* for the tbessie account).

  When one creates a new account, does it never mask the password to start with?

  – Tim

• 

  tbessie · Member · Jun 29, 2015 at 7:42 pm

  • Copy link

  Ah, I see – for some reason the password field’s “view password” icon was activated; I don’t remember clicking on it, but perhaps I did it accidentally. Or perhaps it’s set to on by default?

  – Tim

• 

  auxclass · Member · Jun 29, 2015 at 7:45 pm

  • Copy link

  I have never used the view password option so I have no experience with it – glad you found the check box

  I have also removed the flag for the staff

  I can’t see on by default as being good web practices – so I don’t know