{"id":951,"date":"2009-06-30T10:55:29","date_gmt":"2009-06-30T09:55:29","guid":{"rendered":"http:\/\/blog.intego.com\/?p=951"},"modified":"2009-06-30T10:55:29","modified_gmt":"2009-06-30T09:55:29","slug":"password-masking-is-counter-productive-says-usability-expert","status":"publish","type":"post","link":"https:\/\/www.intego.com\/mac-security-blog\/password-masking-is-counter-productive-says-usability-expert\/","title":{"rendered":"Password Masking is Counter-Productive, Says Usability Expert"},"content":{"rendered":"

Usability expert Jakob Nielsen has published a post on his website<\/a> stating that password masking – the way programs display bullets instead of the text you type when asking you to enter passwords – is counter-productive, and decreases usability of applications and websites.<\/p>\n

You know how it is: you need to enter a password – for a web site, application or system feature – and as you type, you see nothing but bullets in the place of your password:<\/p>\n


\n
\n<\/center><\/p>\n

While there is a purpose to this strategy – preventing someone looking over your shoulder from seeing what you type – this protection is both illusory and inefficient. <\/p>\n

Nielsen writes:<\/p>\n

Most websites (and many other applications) mask passwords as users type them, and thereby theoretically prevent miscreants from looking over users’ shoulders. Of course, a truly skilled criminal can simply look at the keyboard and note which keys are being pressed. So, password masking doesn’t even protect fully against snoopers.\n<\/p><\/blockquote>\n

He points out that users make more mistakes when they can’t see what they type, reducing usability and productivity. And, Nielsen says that when users are “uncertain” about typing passwords, they tend to choose simpler, less secure passwords, which leads to a loss of security.<\/p>\n

\nIn most cases, […] users will appreciate getting clear-text feedback as they enter passwords. Your business will increase, and security will even improve a tiny bit as well.\n<\/p><\/blockquote>\n

Perhaps the solution is to do what Apple does on the iPhone. When you type a password, you see the last character you type, but previous characters are changed into bullets, so you can follow your typing, but never see the entire password.<\/p>\n","protected":false},"excerpt":{"rendered":"

Usability expert Jakob Nielsen has published a post on his website stating that password masking – the way programs display bullets instead of the text you type when asking you to enter passwords – is counter-productive, and decreases usability of applications and websites. You know how it is: you need to enter a password – […]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[13],"tags":[],"class_list":["post-951","post","type-post","status-publish","format-standard","category-security-privacy"],"yoast_head":"\nPassword Masking is Counter-Productive, Says Usability Expert - The Mac Security Blog<\/title>\n<meta name=\"description\" content=\"Usability expert Jakob Nielsen has published a post on his website stating that password masking - the way programs display bullets instead of the text\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.intego.com\/mac-security-blog\/password-masking-is-counter-productive-says-usability-expert\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Password Masking is Counter-Productive, Says Usability Expert - The Mac Security Blog\" \/>\n<meta property=\"og:description\" content=\"Usability expert Jakob Nielsen has published a post on his website stating that password masking - the way programs display bullets instead of the text\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.intego.com\/mac-security-blog\/password-masking-is-counter-productive-says-usability-expert\/\" \/>\n<meta property=\"og:site_name\" content=\"The Mac Security Blog\" \/>\n<meta property=\"article:published_time\" content=\"2009-06-30T09:55:29+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.intego.com\/mac-security-blog\/images\/password_dialog.jpg\" \/>\n<meta name=\"author\" content=\"Peter James\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Peter James\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/password-masking-is-counter-productive-says-usability-expert\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/password-masking-is-counter-productive-says-usability-expert\\\/\"},\"author\":{\"name\":\"Peter James\",\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/#\\\/schema\\\/person\\\/d0c16bd0a4dd8f82d91204f400c8d116\"},\"headline\":\"Password Masking is Counter-Productive, Says Usability Expert\",\"datePublished\":\"2009-06-30T09:55:29+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/password-masking-is-counter-productive-says-usability-expert\\\/\"},\"wordCount\":283,\"publisher\":{\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/password-masking-is-counter-productive-says-usability-expert\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/images\\\/password_dialog.jpg\",\"articleSection\":[\"Security & Privacy\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/password-masking-is-counter-productive-says-usability-expert\\\/\",\"url\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/password-masking-is-counter-productive-says-usability-expert\\\/\",\"name\":\"Password Masking is Counter-Productive, Says Usability Expert - The Mac Security Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/password-masking-is-counter-productive-says-usability-expert\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/password-masking-is-counter-productive-says-usability-expert\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/images\\\/password_dialog.jpg\",\"datePublished\":\"2009-06-30T09:55:29+00:00\",\"description\":\"Usability expert Jakob Nielsen has published a post on his website stating that password masking - the way programs display bullets instead of the text\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/password-masking-is-counter-productive-says-usability-expert\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/password-masking-is-counter-productive-says-usability-expert\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/password-masking-is-counter-productive-says-usability-expert\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/images\\\/password_dialog.jpg\",\"contentUrl\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/images\\\/password_dialog.jpg\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/password-masking-is-counter-productive-says-usability-expert\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Password Masking is Counter-Productive, Says Usability Expert\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/#website\",\"url\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/\",\"name\":\"The Mac Security Blog\",\"description\":\"Keep Macs safe from the dangers of the Internet\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/#organization\",\"name\":\"Intego\",\"url\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/wp-content\\\/uploads\\\/2022\\\/10\\\/intego-organization-logo-for-google-knowledge-graph-875x875-1.png\",\"contentUrl\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/wp-content\\\/uploads\\\/2022\\\/10\\\/intego-organization-logo-for-google-knowledge-graph-875x875-1.png\",\"width\":875,\"height\":875,\"caption\":\"Intego\"},\"image\":{\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/#\\\/schema\\\/person\\\/d0c16bd0a4dd8f82d91204f400c8d116\",\"name\":\"Peter James\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/02040a1b56c0554236733a69e59ffeacde3aff8b1d8fb9818a2b71ebbc0e2484?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/02040a1b56c0554236733a69e59ffeacde3aff8b1d8fb9818a2b71ebbc0e2484?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/02040a1b56c0554236733a69e59ffeacde3aff8b1d8fb9818a2b71ebbc0e2484?s=96&d=mm&r=g\",\"caption\":\"Peter James\"},\"url\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/author\\\/peter\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Password Masking is Counter-Productive, Says Usability Expert - The Mac Security Blog","description":"Usability expert Jakob Nielsen has published a post on his website stating that password masking - the way programs display bullets instead of the text","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.intego.com\/mac-security-blog\/password-masking-is-counter-productive-says-usability-expert\/","og_locale":"en_US","og_type":"article","og_title":"Password Masking is Counter-Productive, Says Usability Expert - The Mac Security Blog","og_description":"Usability expert Jakob Nielsen has published a post on his website stating that password masking - the way programs display bullets instead of the text","og_url":"https:\/\/www.intego.com\/mac-security-blog\/password-masking-is-counter-productive-says-usability-expert\/","og_site_name":"The Mac Security Blog","article_published_time":"2009-06-30T09:55:29+00:00","og_image":[{"url":"https:\/\/www.intego.com\/mac-security-blog\/images\/password_dialog.jpg","type":"","width":"","height":""}],"author":"Peter James","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Peter James","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.intego.com\/mac-security-blog\/password-masking-is-counter-productive-says-usability-expert\/#article","isPartOf":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/password-masking-is-counter-productive-says-usability-expert\/"},"author":{"name":"Peter James","@id":"https:\/\/www.intego.com\/mac-security-blog\/#\/schema\/person\/d0c16bd0a4dd8f82d91204f400c8d116"},"headline":"Password Masking is Counter-Productive, Says Usability Expert","datePublished":"2009-06-30T09:55:29+00:00","mainEntityOfPage":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/password-masking-is-counter-productive-says-usability-expert\/"},"wordCount":283,"publisher":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/#organization"},"image":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/password-masking-is-counter-productive-says-usability-expert\/#primaryimage"},"thumbnailUrl":"https:\/\/www.intego.com\/mac-security-blog\/images\/password_dialog.jpg","articleSection":["Security & Privacy"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.intego.com\/mac-security-blog\/password-masking-is-counter-productive-says-usability-expert\/","url":"https:\/\/www.intego.com\/mac-security-blog\/password-masking-is-counter-productive-says-usability-expert\/","name":"Password Masking is Counter-Productive, Says Usability Expert - The Mac Security Blog","isPartOf":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/password-masking-is-counter-productive-says-usability-expert\/#primaryimage"},"image":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/password-masking-is-counter-productive-says-usability-expert\/#primaryimage"},"thumbnailUrl":"https:\/\/www.intego.com\/mac-security-blog\/images\/password_dialog.jpg","datePublished":"2009-06-30T09:55:29+00:00","description":"Usability expert Jakob Nielsen has published a post on his website stating that password masking - the way programs display bullets instead of the text","breadcrumb":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/password-masking-is-counter-productive-says-usability-expert\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.intego.com\/mac-security-blog\/password-masking-is-counter-productive-says-usability-expert\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.intego.com\/mac-security-blog\/password-masking-is-counter-productive-says-usability-expert\/#primaryimage","url":"https:\/\/www.intego.com\/mac-security-blog\/images\/password_dialog.jpg","contentUrl":"https:\/\/www.intego.com\/mac-security-blog\/images\/password_dialog.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/www.intego.com\/mac-security-blog\/password-masking-is-counter-productive-says-usability-expert\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.intego.com\/mac-security-blog\/"},{"@type":"ListItem","position":2,"name":"Password Masking is Counter-Productive, Says Usability Expert"}]},{"@type":"WebSite","@id":"https:\/\/www.intego.com\/mac-security-blog\/#website","url":"https:\/\/www.intego.com\/mac-security-blog\/","name":"The Mac Security Blog","description":"Keep Macs safe from the dangers of the Internet","publisher":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.intego.com\/mac-security-blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.intego.com\/mac-security-blog\/#organization","name":"Intego","url":"https:\/\/www.intego.com\/mac-security-blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.intego.com\/mac-security-blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2022\/10\/intego-organization-logo-for-google-knowledge-graph-875x875-1.png","contentUrl":"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2022\/10\/intego-organization-logo-for-google-knowledge-graph-875x875-1.png","width":875,"height":875,"caption":"Intego"},"image":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.intego.com\/mac-security-blog\/#\/schema\/person\/d0c16bd0a4dd8f82d91204f400c8d116","name":"Peter James","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/02040a1b56c0554236733a69e59ffeacde3aff8b1d8fb9818a2b71ebbc0e2484?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/02040a1b56c0554236733a69e59ffeacde3aff8b1d8fb9818a2b71ebbc0e2484?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/02040a1b56c0554236733a69e59ffeacde3aff8b1d8fb9818a2b71ebbc0e2484?s=96&d=mm&r=g","caption":"Peter James"},"url":"https:\/\/www.intego.com\/mac-security-blog\/author\/peter\/"}]}},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/posts\/951","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/comments?post=951"}],"version-history":[{"count":0,"href":"https:\/\/www.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/posts\/951\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/media?parent=951"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/categories?post=951"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/tags?post=951"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}