If purpose of an OTP (One Time Password) is temporary usage, then what purpose is served by keeping OTP fields masked?
Even if anyone can view that password while user is typing it, IMO there is no harm in it.
-
It is probably just because it is easier not to remove it. Just creating a an input with type="password" gives the dot masks by default, so the devs probably just didn't bother to go out of their way to remove it.– DasBeastoDec 8, 2016 at 18:50
Add a comment
|
1 Answer
Due to the inherent inertia of user expectations. Users have been conditioned to expect their characters to be masked in a real password entry field, so we mask the password to match expectations.
