PRS-T1 problem with passwords

[Priscillux]

Hello,

Whenever I type in a password on the PRS-T1's browser to log in to websites, each character appears on the screen for a brief period of time (about a second) before it is replaced by a dot. That happens despite the fact that I have the option "Show Password" unchecked. Is this a security risk, and if so, is there a workaround?

I'd be very grateful for any help/suggestions.

[EowynCarter]

Yes, it's there to allow checking you typed the right thing. And it's not a security risk unless someone is looking at your screen

[seajewel]

Originally Posted by Priscillux

Hello,

Whenever I type in a password on the PRS-T1's browser to log in to websites, each character appears on the screen for a brief period of time (about a second) before it is replaced by a dot. That happens despite the fact that I have the option "Show Password" unchecked. Is this a security risk, and if so, is there a workaround?

I'd be very grateful for any help/suggestions.

Not sure if you already know this, but most password sites seem to do this, I don't think it's a "T1" thing. It's probably just that the slow e-ink refresh/delay is making it more noticeable to you.

[khalleron]

If you had 'Show Password' checked, you could see the entire password, not just one letter at a time.

As you have it, it's working the way it's supposed to - so you're not typing completely blind, but the entire password does not show.

[pmcnz]

Hi, this brief display of the letter before obscuring it is a standard behaviour for password entry on Android smartphones and iPads - hence the T1 software is behaving "normally".
I work at testing using many different cellphones and tablets so I've seen this appear as a "new feature" in the later devices.
Paul

[HarryT]

It's pretty essential on a touch keyboard - they're just not accurate enough for blind typing. The last thing you want is to type in a password and then not know what it was.

[Priscillux]

EowynCarter, seajewel, khalleron, pmcnz, HarryT:

Thank you all for replying.

I understand from what you're saying that this is standard behaviour for Android-based devices, so my Sony isn't doing anything out of the ordinary. Yes, it's quite convenient to be able to see each character as you enter it, because the lack of a standard keyboard makes mistakes more likely.

However, isn't there a risk that the password be intercepted if the characters are visible even briefly? Sorry if the question sounds naive to those of you with a better than mine grasp of the technical aspects of password protection and security, but I'm reluctant to put in, say, my email password unless I'm quite reassured it's fully protected from "intruders".

seajewel you're saying that:

but most password sites seem to do this, I don't think it's a "T1" thing. It's probably just that the slow e-ink refresh/delay is making it more noticeable to you.

So do you mean that this is what happens normally, only it's not noticeable because the refresh rate on, e.g. a computer screen, would be a lot faster?

[seajewel]

Maybe it doesn't happen on a computer, I don't recall at this moment, but it always happens on my iPhone (which I am using right now)

[HarryT]

Originally Posted by Priscillux

I understand from what you're saying that this is standard behaviour for Android-based devices, so my Sony isn't doing anything out of the ordinary.

It's standard behaviour on all touch-screen devices. Nothing to do with Android. My iPad, on which I'm typing this, does it too.

However, isn't there a risk that the password be intercepted if the characters are visible even briefly? Sorry if the question sounds naive to those of you with a better than mine grasp of the technical aspects of password protection and security, but I'm reluctant to put in, say, my email password unless I'm quite reassured it's fully protected from "intruders".

The software you're typing the password into is going to store it the same way regardless of what appears or doesn't appear on the screen. The only "risk" is of someone looking over your shoulder. And if what you're typing is that confidential, you shouldn't be using e-mail in the first place. E-mail is not a secure communications medium unless you encrypt it.

[carpetmojo]

Depending on the password length, I think you'd probably spot someone looking over your shoulder - and this is the T1, so they'd be squinting as well !

Unless you're a high enough security risk to have journalists with high-power cameras following your every move.......

[Priscillux]

Originally Posted by HarryT

The software you're typing the password into is going to store it the same way regardless of what appears or doesn't appear on the screen. The only "risk" is of someone looking over your shoulder. And if what you're typing is that confidential, you shouldn't be using e-mail in the first place. E-mail is not a secure communications medium unless you encrypt it.

That's quite reassuring, HarryT, thank you very much (I mean the bit about the software handling the password securely is reassuring, not the bit about e-mail. I guess if we wanted real security we'd have to go back to the olden days of hand-delivered letters -- perhaps pigeon post wasn't such a bad idea after all...).

Unless you're a high enough security risk to have journalists with high-power cameras following your every move.......

Not quite yet, carpetmojo, not quite yet