I am saving Twitter keys in a database. The 4 fields needed are in a place where more than one (at least semi trusted) person is able to add the required keys. However, it is suggested that you should not allow the keys to be visible in an application.
I want to show that the field has been completed, without showing the content of the field and still allowing users to overwrite the data if necessary.
I currently use the password field, however, this does not let other admins know that it is filled in. How would you show this without allowing the private keys to be copied?
As far as I can tell, you can't safely prefill a password field from the server side. You can set a value in the HTML but then it loses security as the user can grab the key from the page source.
Try to register and fill out one password field. Submit it and you will be given your errors and your password will be gone.