UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The password reveal button must not be displayed.


Overview

Finding ID Version Rule ID IA Controls Severity
V-36700 WN08-CC-000076 SV-48325r2_rule IAIA-1 Medium
Description
Visible passwords may be seen by nearby persons, compromising them. The password reveal button can be used to display an entered password and must not be allowed.
STIG Date
Windows 8 / 8.1 Security Technical Implementation Guide 2015-09-02

Details

Check Text ( None )
None
Fix Text (F-41457r1_fix)
Configure the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Credential User Interface -> "Do not display the password reveal button" to "Enabled".