BaselineWatch
Desk

os_obscure_password Obscure Passwords

NIST macOS Security Compliance Project Tahoe Guidance, Revision 3.0 (cf656e8)
All changes in this version
first version loaded macOS

Title

Obscure Passwords

Control

The technology supports this requirement and cannot be configured to be out of compliance. The technology inherently meets this requirement.

Discussion

The information system _IS_ configured to obscure feedback of authentication information during the authentication process to protect the information from possible exploitation by unauthorized individuals.

The inherent configuration of a macOS uses NSSecureTextField for any text field that receives a password, which automatically obscures text which is entered.

link:https://developer.apple.com/documentation/appkit/nssecuretextfield[]

Related controls

ia-5, ia-6

Fix

The technology inherently meets this requirement. No fix is required.