Jakob Nielsen’s Alertbox “Stop Password Masking”. http://is.gd/1cMil I agree with it being optional, enabled by default, but still there!