Nielsen Recommends Not Masking Passwords

Mark writes "Usability expert and columnist Jakob Nielsen wants to abolish password masking: 'Usability suffers when users type in passwords and the only feedback they get is a row of bullets. Typically, masking passwords doesn't even increase security, but it does cost you business due to login failures.' I've never been impressed by the argument that 'I can't think why we need this (standard) security measure, so let's drop it.' It usually indicates a lack of imagination of the speaker. But in this case, does usability outweigh security?"

Comments

Re:hunter2

[Joce640k]

Ok, smart guy.. maybe you can explain to us why Microsoft makes you type in your password twice when you log onto a wireless network.

Around here that's 26 random characters which you have to get right, twice. That's so horrible to use it must be really secure, right?

Same thing with email addresses in online forms, why do I always have to type those in twice? Luckily those aren't asterisked out so I can copy paste them. I'm sure there must be a good security reason for entering them twice.

Re:Making my point with humor

[DriedClexler]

My hands know the password to my sperm bank.

Re:One word for Nielsen: Projector

[justinlee37]

I'm pretty sure that some organizations use a selection process for hiring managers that somewhat resembles this