If purpose of OTP (One Time Password) is for temporary basis, then what purpose does it serve by keeping OTP fields masked?

Even if anyone can view that password while user is typing it, IMO there is no harm in it.

  • It is probably just because it is easier not to remove it. Just creating a an input with type="password" gives the dot masks by default, so the devs probably just didn't bother to go out of their way to remove it. – DasBeasto Dec 8 '16 at 18:50

Due to the inherent inertia of user expectations. Users have been conditioned to expect their characters to be masked in a real password entry field, so we mask the password to match expectations.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.