os_obscure_password Obscure Passwords
NIST macOS Security Compliance Project Sequoia Guidance, Revision 4.0 (be5491f)
All changes in this version
All changes in this version
Title
Obscure Passwords
Control
The technology supports this requirement and cannot be configured to be out of compliance. The technology inherently meets this requirement.
Discussion
The information system _IS_ configured to obscure feedback of authentication information during the authentication process to protect the information from possible exploitation by unauthorized individuals.
The inherent configuration of a macOS uses NSSecureTextField for any text field that receives a password, which automatically obscures text which is entered.
link:https://developer.apple.com/documentation/appkit/nssecuretextfield[]
Related controls
ia-5, ia-6
Fix
The technology inherently meets this requirement. No fix is required.