---
id: os_obscure_password
title: Obscure Passwords
discussion: |-
  The information system _IS_ configured to obscure feedback of authentication information during the authentication process to protect the information from possible exploitation by unauthorized individuals.

  The inherent configuration of a macOS uses NSSecureTextField for any text field that receives a password, which automatically obscures text which is entered.

  link:https://developer.apple.com/documentation/appkit/nssecuretextfield[]

  NOTE: The technology supports this requirement and cannot be configured to be out of compliance. The technology inherently meets this requirement.
references:
  nist:
    cce:
      macos_27:
        - CCE-XXXXX-X
      macos_26:
        - CCE-95246-5
      macos_15:
        - CCE-94244-1
      macos_14:
        - CCE-92840-8
    800-53r5:
      - IA-6
      - IA-5
    800-171r3:
      - 03.05.11
  disa:
    srg:
      - SRG-OS-000079-GPOS-00047
    cmmc:
      - IA.L2-3.5.8
      - IA.L2-3.5.9
      - IA.L2-3.5.11
  hhs:
    hicp:
      - 2.L.B
      - 3.L.B
      - ''
  cis:
    controls_v8:
      - 4.1
platforms:
  macOS:
    '27.0': {}
    '26.0': {}
    '15.0': {}
    enforcement_info:
      fix:
        additional_info: The technology inherently meets this requirement. No fix is required.
tags:
  - 800-53r5_low
  - 800-53r5_moderate
  - 800-53r5_high
  - 800-171
  - inherent
  - cisv8
  - cnssi-1253_low
  - cnssi-1253_high
  - cmmc_lvl2
  - cnssi-1253_moderate
  - hicp_lp
