Masking Passwords: Is It Really Useful?
By Luciana on July 13, 2009 | Computer Security, security basics, online security, secure password, password masking
Have you ever wondered why your password turns into bunch of asterisks when you type it? Security expert Bruce Schneier recently claimed this measure being too inconvenient and totally not user-friendly. Later he took his word back and he even supported the opposite opinion. What are the advantages and disadvantages of password masking?
The asterisks or dots or other symbols displayed instead of the actual password is one of the simplest security measures. Simple things are brilliant, but what the masking really adds to the safety? It was invented to keep curious people from spying you over the shoulder. This problem is still significant. The password masking is probably the main reason why shoulder surfing is not so successful and the reason why it’s not considered a serious threat to one’s privacy. If we choose ignore the factor of indiscreet people around us, this mean has other use. Password masking helps you when you’re screencasting or when you’re in a similar situation which requires showing your screen.
Password masking is blamed for being inconvenient. When users can’t see what they’re typing, they can easily mistype or become confused. If user mistypes (this happens more often than you think) and he/she can’t access a website or application, the chances of him or her trying to login again reduce with each attempt. This also encourages people to use shorter and simpler (therefore, less secure) passwords.
What’s the verdict? Keep it or leave it? Security experts recommend not saying goodbye just yet. Password masking has its value in overall security; plus, it reminds people to keep their passwords protected. Fortunately, the alternative is not switching the masking off; it’s making it handier. One of the options is displaying the characters shortly before hiding them. The other suggestion is making the masking a customizable thing. Since the issue was raised, we can expect other compromises of password masking soon.
More Computer Security news
Adobe news: Sandboxed Flash Player for Firefox released
This week Adobe launched a beta version of Flash Player for Firefox. This version is better for its sandbox feature. A platform security strategist at Adobe, Peleus Uhley said in a blog: "The design of this sandbox is similar to what Adobe delivered with Adobe Reader X Protected Mode and follows the same Practical Windows Sandboxing approach. Read more.- How to get PDF secured?
- 'Nazileaks' site is hacked by hacker group Anonymous
- Spywared.com wishes you happy holidays!
- Silent IE updates
- Anonymous and Team Poison duet create Operation Robin Hood
- Unprotected data still remains at British businesses
- 12 vulnerabilities are fixed by Adobe
- Be ready for Halloween scare on Internet: avoid scam attacks
- Who's fault is the mess on Youtube?
- Survey reveals overconfidence about security systems
