One of my pet peeves is password masking. I find nothing more frustrating than having a log-in rejected, and not being able to verify that it is correct because I can’t see the password. It was quite nice to find out I’m not alone. Jakob Nielsen’s article Stop Password Masking makes a very good case for stopping the practice. It also addresses the exceptions.
Thank you Mr. Nielsen!