Section
1.1.3
General
On password input dialogs, always use an input field of type PASSWORD rather than FORM to that ensure entered passwords are not visible in the user's browser.
Django

Making use of the PasswordInput form widget will make the form field use type='password' on the HTML input tag, causing the password to be hidden when typed.

Natural Webagent
This is handled automatically when using EID authentication.