Guest

Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length

Statistics

  • 175,655 Posts in 3,509 Topics by 701 Members
  • Latest member: folie-a-deux

Snark News

 
 
Pages: [1]
Print
Author Topic: Password Masking  (Read 587 times)
0 Members and 1 Guest are viewing this topic.
Ben
Trusted Member
Hero Member
****

Offline Offline
Posts: 4,127


</sarcasm>


WWW
« on: 01/16/10 at 10:28 AM »

A topic which was raised a couple of months ago by Jakob Neilson's post 'Stop Password Masking'.

Quote
Usability suffers when users type in passwords and the only feedback they get is a row of bullets. Typically, masking passwords doesn't even increase security, but it does cost you business due to login failures.

What are your thoughts? Do you think it holds value? If so, have you tried it out since?

I know that there have been JavaScript plugins which have been authored and tested which creates a medium between stopping password masking, and enabling it at the user's choice. One example being iPhone-like password fields using jQuery
Logged

Jem
Administrator
A Tad Obsessed
*******

Offline Offline
Posts: 11,672


Google's Secret Agent


WWW
« Reply #1 on: 01/16/10 at 10:54 AM »

No thanks. I get people reading over my shoulder all the damned time, and don't want 'em knowing my password.

I think an important thing is appearances too - an unmasked password appears to be less secure, and therefore might put people off.
Logged

jemjabella | tutorialtastic | the q*bee | rev.iew.me
I poke fun at people in real life too.
Ann
Hero Member
*****

Offline Offline
Posts: 1,279


Without an E.


WWW
« Reply #2 on: 01/16/10 at 10:00 AM »

Speaking from a purely non-technical perspective, it's not that I'd mind people reading my password as I type it (if it is no less secure) if the password were normal (like an abstract word/numbers) but in an effort to be a little different, a lot of my passwords actually turn out to be rather embarrassing.  Roll Eyes
Logged

Macca
Hero Member
*****

Offline Offline
Posts: 720


Stopping at all stations to home.


WWW
« Reply #3 on: 01/16/10 at 10:09 AM »

No thanks. I get people reading over my shoulder all the damned time, and don't want 'em knowing my password.

I think an important thing is appearances too - an unmasked password appears to be less secure, and therefore might put people off.

Ditto this. Even though I know realistically that a password is probably no more or less securely stored if it was hidden from plain sight (after all, a lot of people actually write their passwords down on post-its and stuff if nobody is likely to be around their desk, which I think is fair enough within the home) I am always quite taken aback if a password is shown, as though it leads me to believe that the site owner hasn't really thought about security at all, however unfounded that thought ends up being. (After all, a hidden password might not be secured at all. There's no real way to judge. Use different passwords for everything, folks.)

I am not always using my own personal private computer in an isolated area. I used to use computers a lot at computer laboratories at school, college and university as well as public libraries and internet cafés and even on my laptop out and about. I would hate for anyone to be able to take a glance, and I think that becomes more and more likely as more people are moving about with their computers.
Logged

[Insert witty disclaimer here]
Meg
Hero Member
*****

Offline Offline
Posts: 4,413



WWW
« Reply #4 on: 01/16/10 at 10:14 AM »

Yeah, I don't want people looking at my screen and knowing my passwords. I also think there's an element of unprofessionality to not masking passwords, simply because people are used to corporations' websites using password masking.

I don't think stopping it would increase usability, either. How hard is it really to type a password even if you can't see it appear on the screen?
Logged
Ms. Smartarse
Trusted Member
A Tad Obsessed
****

Offline Offline
Posts: 8,335


(in)sufficiently (im)mature


WWW
« Reply #5 on: 01/16/10 at 10:29 AM »

They still know the number of characters even with masking.
I especially like it in linux command line, that when I log in (using putty), nothing shows up when I type the password.

That said, like Jem said, unmasked passwords generate the impression that they are less secure. I don't get people looking over my shoulders when I type in passwords. Seeing as I'm in a tech related environment mostly, it's kind of like an unspoken rule of conduct for us to turn away while passwords are being typed.
Logged

"Sneaky little hobbits, they sneak into your codes" -- Julie
---------------------

Thanks to Sarai for the avatar
Kaylee
A Tad Obsessed
******

Offline Offline
Posts: 9,570


her?


WWW
« Reply #6 on: 01/16/10 at 10:34 AM »

Some of my passwords are embarrassing so I'd rather NOT see them when I type them. Tongue

I don't think it's a good idea. I imagine everyone is used to passwords being masked, so if it wasn't and someone else happened to be looking at your screen, you wouldn't be expecting it. I know I'd type my full password in before I noticed that it was fully visible...
Logged

"Why are you squeezing me with your body?"
"I'm hugging you." !
Jem
Administrator
A Tad Obsessed
*******

Offline Offline
Posts: 11,672


Google's Secret Agent


WWW
« Reply #7 on: 01/16/10 at 10:56 AM »

I don't get how you guys have embarrassing passwords.. all of mine are 8+ chars of random letters and numbers. Unimpressed
Logged

jemjabella | tutorialtastic | the q*bee | rev.iew.me
I poke fun at people in real life too.
Amelie
Global Moderator
Hero Member
******

Offline Offline
Posts: 4,274


Not the film


WWW
« Reply #8 on: 01/16/10 at 10:56 AM »

I also get the impression of an unmasked password being less secure (even though it's not).

I do have people looking over my shoulder and while a lot of my passwords are random characters, that doesn't mean I want people knowing them or seeing them.

I'm with Vera - the Unix way is good since you don't even see any characters when you type the password. It's a bit confusing if you're not used to it as it gives the impression you haven't typed anything at all, but after that initial period it's normal to me Tongue
Logged
Emma
Events Moderator
A Tad Obsessed
******

Offline Offline
Posts: 7,533


MD to be


WWW
« Reply #9 on: 01/16/10 at 10:56 PM »

I don't get how you guys have embarrassing passwords.. all of mine are 8+ chars of random letters and numbers. Unimpressed

I find random stuff more difficult to remember. I mean, at the moment I have trouble remembering my own mobile number. So I can see how embarrassing things might be easier to remember (and harder to guess for people) than random number/letter combinations.
Logged

E to-the-double-M A Wink
Sir Humphrey: The treasury doesn't workout what they need to spend and then think how to raise the money, they pitch for as much as they can get and then think what to spend it on. (Yes, Prime Minister)
Kaylee
A Tad Obsessed
******

Offline Offline
Posts: 9,570


her?


WWW
« Reply #10 on: 01/16/10 at 10:22 PM »

Some of mine are embarrassing because, like Emma, I want something I can remember easily. I do work numbers and random characters into the words, but they can still be read Ha!
Logged

"Why are you squeezing me with your body?"
"I'm hugging you." !
Vasili
Hero Member
*****

Offline Offline
Posts: 4,161



WWW
« Reply #11 on: 01/16/10 at 10:56 PM »

I'd rather not have people see what I'm typing because many times I have my brother/mother/father over my shoulder and it would be very awkward to have them read my password. Though, like Jem and Amelie, I just have 14 random characters as each of my passwords that are stored in 1Password.
Logged

Lilian
Hero Member
*****

Offline Offline
Posts: 1,887



WWW
« Reply #12 on: 01/16/10 at 10:31 PM »

Jakob makes it sound like password masking is a new thing. Unimpressed Even my grandmother (who is too computer illiterate to open e-mail) understands password masking. It's in the user psychology. If anything, changing it would cause more problems with confusing users (like Amelie said it would feel less secure).
Logged

The Great Snark Art Worm!
[/flailing and screaming]
lilula
Ben
Trusted Member
Hero Member
****

Offline Offline
Posts: 4,127


</sarcasm>


WWW
« Reply #13 on: 02/09/10 at 10:42 PM »

Just read this interesting article from A List Apart about Password Masking: http://www.alistapart.com/articles/the-problem-with-passwords/
Logged

Pages: [1]
Print
Jump to: