TMA-ANDROID-1.8
Ensure 'Show passwords' is set to 'Disabled'
Description
This setting controls whether passwords typed into a user's Android device are visible on screen or hidden. When this setting is disabled, the password is concealed, and only the most recent character is visible for a short time after it has been pressed. The recommended state for this setting is: Disabled.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
Follow the below steps to verify Show passwords is set to Disabled: phone's Settings app > Privacy > Verify that Show passwords slider is OFF.
How it is fixed
Fix method: Guidance or infrastructure patch
Follow the below steps to disable Show passwords: phone's Settings app > Privacy > Toggle Show passwords to OFF position.
Properties
- Operating systems
- Any
- Tags
- androiddevice-settings
- Reference
- CIS Google Android Benchmark v1.6.0 - 1.8 Ensure 'Show passwords' is set to 'Disabled'