id: os_obscure_password
title: Obscure Passwords
discussion: |
  The information system _IS_ configured to obscure feedback of authentication information during the authentication process to protect the information from possible exploitation by unauthorized individuals.

  The inherent configuration of a macOS uses NSSecureTextField for any text field that receives a password, which automatically obscures text which is entered.

  link:https://developer.apple.com/documentation/appkit/nssecuretextfield[]
check: |
  The technology supports this requirement and cannot be configured to be out of compliance. The technology inherently meets this requirement.
fix: |
  The technology inherently meets this requirement. No fix is required.
references:
  cce:
    - CCE-95246-5
  cci:
    - N/A
  800-53r5:
    - IA-6
    - IA-5
  800-53r4:
    - IA-5
    - IA-6
  disa_stig:
    - N/A
  srg:
    - SRG-OS-000079-GPOS-00047
  800-171r3:
    - 03.05.11
  cis:
    benchmark:
      - N/A
    controls v8:
      - 4.1
  cmmc:
    - IA.L2-3.5.8
    - IA.L2-3.5.9
    - IA.L2-3.5.11
macOS:
  - '26.0'
tags:
  - 800-53r5_low
  - 800-53r5_moderate
  - 800-53r5_high
  - 800-53r4_low
  - 800-53r4_moderate
  - 800-53r4_high
  - 800-171
  - inherent
  - cisv8
  - cnssi-1253_low
  - cnssi-1253_high
  - cmmc_lvl2
  - srg
  - cnssi-1253_moderate
mobileconfig: false
mobileconfig_info:
