3.11.8.1 (L1) Ensure 'Do not display the password reveal button' is set to 'Enabled'

Information

This policy setting allows you to configure the display of the password reveal button in password entry user experiences.

The recommended state for this setting is: Enabled

This is a useful feature when entering a long and complex password, especially when using a touchscreen. The potential risk is that someone else may see your password while surreptitiously observing your screen.

Solution

To establish the recommended configuration via configuration profiles, set the following Settings Catalog path to Enabled

Administrative Templates\Windows Components\Credential User Interface\Do not display the password reveal button

Impact:

The password reveal button will not be displayed after a user types a password in the password entry text box.

See Also

https://workbench.cisecurity.org/benchmarks/16853

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(1)

Plugin: Windows

Control ID: 325aaae1606fcb3cad6b42fee1007c47d84775728d30a5bca777fc62ffffd23e