IA.2.082 Obscure feedback of authentication information.

CMMC Practice IA.2.082: Obscure feedback of authentication information.

Links to Publicly Available Resources

CMMC CLARIFICATION (Ref CMMC – Appendix B)

A password is a type of authentication information. When users enter this information, the system displays a symbol, such as an asterisk. This prevents others from seeing the actual characters. The organization should obscure feedback based on a defined policy. For example, smaller devices may briefly show characters before obscuring.