Ask HN: Why 2nd factor entries are not treaded as a password?

1 pointsby xtus8 tahun yang lalu3 comments

I mean, why when you type them, the form is configured to be clear text?

3 comments

cimmanom8 tahun yang lalu

Because they’re single-use, thus it doesn’t matter if someone looking over your shoulder sees them being typed in.

xtus8 tahun yang lalu

Still, if somebody knows your credentials, can impersonate yourself looking at your shoulders, or at the phone, if is faster than yourself in typing it.

cimmanom8 tahun yang lalu

Wouldn’t they have already seen it in plan text in whatever medium you received it?