See Passwords Behind Asterisks? How to Reveal Them

Yes, you can see passwords hidden behind asterisks or dots in most browsers and apps, either by using the built-in “eye” icon, editing the password field in your browser’s developer tools, or using a browser extension that reveals them on demand. This article explains the different methods, why password masking exists, and the security considerations you should keep in mind before revealing a password.

Why Are Passwords Hidden Behind Asterisks?

Password masking—replacing typed characters with dots, asterisks, or bullets—was introduced to prevent “shoulder surfing,” where someone nearby could glance at your screen and see your password as you type it. The practice dates back to early computer terminals and has remained a standard in web forms, desktop apps, and mobile devices. While it protects against casual observation, it also makes it easy to mistype a password without noticing. That’s why many systems include a “show password” toggle, usually an eye icon, to let you verify what you’ve entered.

How to Reveal Passwords in Browsers

Most modern browsers (Chrome, Firefox, Edge, Safari) offer a built-in way to reveal a saved or typed password. Here are the most common methods:

• Eye icon: Many websites include an eye icon inside the password field. Clicking it toggles the masking on and off. If you don’t see one, the site may not offer it.
• Browser’s saved password manager: Go to your browser’s settings (e.g., Chrome’s “Passwords” under Settings, Firefox’s “Logins and Passwords”), find the site, and click the eye icon next to the password. You may need to enter your system password or confirm your identity.
• Developer tools: Right-click the password field and select “Inspect” (or press F12). In the Elements panel, find the <input type="password"> tag. Double-click the word password inside the type attribute, change it to text, and press Enter. The password will become visible. This works on almost any website.

For a quick, one-off reveal without changing the page code, you can also use the browser’s console: open DevTools (F12), go to the Console tab, and type document.querySelector('input[type=password]').type = 'text' then press Enter. This changes the first password field on the page to plain text.

Using Browser Extensions to Reveal Passwords

If you regularly need to see passwords behind asterisks, browser extensions can add a one-click reveal button to every password field. Popular options include “Show Password” extensions for Chrome and Firefox, which place a small eye icon next to each password input. These extensions work by injecting a script that toggles the input type, similar to the developer tools method. However, be cautious: only install extensions from official stores (Chrome Web Store, Firefox Add-ons) and check their ratings and permissions. Some extensions have been known to collect data, so read the privacy policy before installing.

Revealing Passwords in Mobile Apps

On smartphones and tablets, the process varies by operating system and app:

• iOS (iPhone/iPad): Many apps include a show/hide toggle (eye icon) in the password field. For saved passwords, go to Settings > Passwords, authenticate with Face ID/Touch ID/passcode, and tap a site to see its password.
• Android: Similar to iOS, apps often have an eye icon. For saved passwords in Chrome, go to Chrome menu > Settings > Passwords, verify your identity, and tap the eye next to a saved entry.
• Password managers (LastPass, 1Password, etc.): These apps typically show the password by default or have a reveal button. They also store your passwords securely, so you don’t need to reveal them in the browser.

Security Considerations: When Not to Reveal

Revealing a password on screen carries risks, even if you’re alone. Here are important points to keep in mind:

• Shoulder surfing: If someone is nearby, they could see your password. Always check your surroundings before unmasking.
• Screen recording: Malware or screen-recording software could capture your password if you reveal it. If you suspect your device is compromised, don’t reveal passwords.
• Public computers: Never reveal passwords on a shared or public computer, as the next user might see them or the browser might save them.
• Extensions and third-party tools: Only use trusted extensions, as they have access to all pages you visit.

Also, remember that revealing a password in the browser does not change its security. The password is still stored in plain text on the server (or hashed, but that’s separate). If you’re concerned about security, use a strong, unique password and enable two-factor authentication.

Common Problems and Fixes

Sometimes the methods above don’t work. Here are typical issues and solutions:

• No eye icon: Some sites disable the toggle for security. Use developer tools instead.
• Developer tools won’t change type: Some modern sites use JavaScript to re-mask the field. Try editing the type attribute and then clicking elsewhere; if it reverts, you may need to use the console method or an extension.
• Password field is not an input: Some sites use a custom component (e.g., a canvas or div) instead of a standard input. In that case, the developer tools method won’t work. Try using the browser’s password manager to view the saved password.
• Forgot password: If you can’t see the password because you’ve forgotten it, use the “Forgot password” link on the site to reset it. Never try to guess or brute-force.

Alternatives to Revealing Passwords

If you frequently need to see passwords, consider these alternatives:

• Use a password manager: It stores all your passwords and can auto-fill them. You only need to remember one master password. Most managers show the password on demand without exposing it in the browser.
• Use a password generator: Generate strong, random passwords that you don’t need to memorize. The manager will remember them.
• Enable two-factor authentication (2FA): Even if someone sees your password, they can’t log in without the second factor.

These methods reduce the need to reveal passwords and improve overall security.

Frequently Asked Questions

Can I see a password behind asterisks in Chrome?

Yes. For a saved password, go to Chrome Settings > Passwords, find the site, and click the eye icon. For a password you’re typing, right-click the field, select Inspect, and change type="password" to type="text".

Is it safe to reveal a password using developer tools?

It’s safe if you’re on your own device and no one is watching. Developer tools only change the display; they don’t send the password anywhere. However, if you’re on a public computer, avoid doing this.

Why do some sites not have a show password option?

Some sites choose not to include the toggle for security or usability reasons, perhaps to prevent users from accidentally revealing passwords to others. In such cases, use the browser’s password manager or developer tools.

Can I see a password behind asterisks in Firefox?

Yes. For saved passwords, go to Firefox > Settings > Privacy & Security > Saved Logins, then click the eye icon. For a typed password, use the same developer tools method as in Chrome.

Are there any risks to using a browser extension to reveal passwords?

Yes. Extensions can access all pages you visit, so a malicious one could steal passwords. Only install extensions from official stores with good ratings and a clear privacy policy. Alternatively, use the built-in developer tools method, which requires no extra software.

What if I can’t see the password even with developer tools?

Some sites use complex JavaScript that re-masks the field after you change the type. Try using the console method: document.querySelector('input[type=password]').type = 'text'. If that fails, the site might use a custom component; in that case, use the browser’s saved password manager to view the password.

Related

• Witcher 3 Main Quests: Full List by Act and Location
• Best Google Search Alternatives for Privacy
• RX 6800 XT vs RTX 3080: Which GPU Wins?