Currently, user passwords are entered in plain text during both registration and login. This poses a potential security and user experience issue.
- Password Masking:
- When a user types a password in the terminal, it should be hidden (not displayed) using standard terminal input masking (replaced with *).
- Password Verification (During Registration):
- After the user enters the password, prompt them to re-enter it for confirmation.
- If the passwords don’t match, display an error and ask again.
- Consistent Experience During Login:
- Mask password input during login as well.
I trust the maintainers to label this issue accordingly.