Ask HN: Why 2nd factor entries are not treaded as a password?

I mean, why when you type them, the form is configured to be clear text?

3 comments

Because they’re single-use, thus it doesn’t matter if someone looking over your shoulder sees them being typed in.

xtus8 anni fa

Still, if somebody knows your credentials, can impersonate yourself looking at your shoulders, or at the phone, if is faster than yourself in typing it.

cimmanom8 anni fa

Wouldn’t they have already seen it in plan text in whatever medium you received it?