Picto thématique

Rule n° 74 - The characters entered in a password field can be displayed in an un-encrypted text.

When entering your passwords, you are use to entering them in dedicated fields, where each character entered is replaced by a dot or a star. This is good, as it avoids consultation over your shoulder. But very often, especially for long passwords or in mobile contexts, this can be annoying. Therefore, why not give users the possibility to display their passwords at their request, when they need them and when they consider that this does not present a confidentiality risk.

#Accessibility #Forms #Conception #Development


  • Simplify password entry, especially on mobile devices’ virtual keyboards.
  • Prevent mistakes.


Display a button associated with a script that toggles the value of the type attribute of the entry field between the values password and text.


Manually control the possibility of displaying the password in plain text via a mechanism in the page.

By Opquast - Read the license

Discover Opquast training and certification

The objective of these rules and the Opquast community mission is ‘making the web better’ for your customers and for everyone! Opquast rules cover the key major areas of risk that can negatively affect website users such as privacy, ecodesign, accessibility and security.

Opquast training has already allowed over 14,500 web professionals to have their skills certified. Train your teams or your students, contact us