30

While I was entering my password in Gmail and other mail accounts, I could see a symbol of an "eye" in the text box.

This is really dangerous because once you click on the eye, your password is revealed.

Is there any way I can disable that eye symbol? I'm getting this in Internet Explorer. Has anyone else encountered it?

4
  • 9
    This happens to be one of my favorite features in Windows 8, and removes the illusion of security provided by 'little dots'.
    – rtf
    Oct 21, 2012 at 16:12
  • 2
    There is some security provided by the 'little dots' - malicious software taking screen shots or someone standing behind you can otherwise read the password.
    – markmnl
    Jan 14, 2014 at 7:03
  • @markmnl If you got a password stealing malware product on your computer, I'd assume it uses something more reliable than a simple screenshot (which would need OCR or human intervention and only works when the password is visible), like keylogging or any browser based attack. Even social engineering would be more reliable.
    – Nzall
    Jan 14, 2014 at 15:21
  • 1
    @NateKerkhofs malware has used this technique in the past so it is not detected by anti-malware that would block key-logging - security is all about preventing all vulnerabilities otherwise there wouldn't be much point - should a prison only have guards at the main gate :)
    – markmnl
    Jan 15, 2014 at 1:25

1 Answer 1

34

The new 'eye' symbol is present in all the password fields in Internet Explorer 10 which comes default with Windows 8 (and is also available for Windows 7). To reveal the password, the user needs to keep the 'eye' symbol pressed.

Disabling it (in Windows 8):

Please note that to do the following, you will need to access the Local Group Policy Editor, which is only available in Windows 8 Pro. You can see if you have Windows 8 Pro by pressing Win+Pause, which opens the System Properties window. If under "Windows Edition" you see Windows 8 Pro, you will be able to access the Group Policy Editor.

To disable the "eye" symbol, follow these steps:

  1. Open the Run dialog (Win+R)

  2. Enter gpedit.msc and press Enter

  3. Local Group Policy editor will open:
    GPedit

  4. Navigate to Computer Configuration → Administrative Templates → Windows Components → Credential User Interface:
    Option here

  5. Double-click on "Do not display the password reveal button" and select the "Enabled" option:
    Option

  6. The behaviour is disabled, you can enable it with the same method.

Source: (From Wayback machine Web archive) Enable or Disable Password reveal option in Windows 8

5
  • 5
    You should note that "hiding" the password doesn't give any safety to anything but the person standing behind you while you type. So unless that person is handling the mouse to click the button no security has been breached at all. And even in all previous Windows versions passwords from "hidden" passwords fields can be trivially retrieved.
    – orlp
    Oct 21, 2012 at 13:36
  • 2
    @AkshatMittal: yes, but you did not note the misconception in his question: "This is really dangerous because once you click on the eye, your password is revealed.".
    – orlp
    Oct 21, 2012 at 13:47
  • @nightcracker I did note that, but the simple thing is he asked for 'How to disable it?' Oct 21, 2012 at 13:48
  • @nightcracker - I totally agree, getting the contents of a textbox in Windows is (was) very easy. In memory, most of the time, the password is stored in the clear. Oct 22, 2012 at 17:58
  • strange that I can't find a place to go to Local Group Policy Editor without using a command line ... back to DOS times!
    – sergiol
    Apr 25, 2013 at 12:09

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .