Interesting… Jackob N. says we should not mask passwords in webforms http://www.useit.com/alertbox/passwords.html
