Catalina - Obscure Passwords

Information

The information system _IS_ configured to obscure feedback of authentication information during the authentication process to protect the information from possible exploitation by unauthorized individuals.

The inherent configuration of a macOS uses NSSecureTextField for any text field that receives a password, which automatically obscures text which is entered.

link:https://developer.apple.com/documentation/appkit/nssecuretextfield[]

Solution

The technology inherently meets this requirement. No fix is required.

See Also

https://github.com/usnistgov/macos_security

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5, 800-53|IA-6, CCE|CCE-84869-7, CCI|CCI-000206

Plugin: Unix

Control ID: b4ef44cc40e3e84de4ce5869d0a2508055fa84efffced0885c148786b7852e59