Password reveal block

Entitlement: passwordRevealBlock. Configuration: internal.password_reveal_block. No JavaScript API is needed.

Enable

Merge this into the instance EP, re-sign if required, and restart:

{
  "internal": {
    "password_reveal_block": true
  }
}

The feature requires both the License capability and boolean true. Missing or false leaves it off.

What changes

• Existing password inputs cannot be changed to non-password types, and supported reveal controls are restricted.
• Supported browser password management/editing surfaces hide password reveal and copy controls.
• Password checkup entry and password CSV export are restricted.
• Username copy is not a password reveal operation and remains available.
• The add-password dialog still allows the user to reveal the password being entered.

Saved passwords and autofill remain available. Websites can still receive login passwords, and this capability does not block all JavaScript reads.

Verify and maintain

Use a test page with a password input and a show-password toggle; the input should remain a password field. Check the browser's existing-password management UI separately from its add-password dialog. Do not log real passwords while testing.

To disable, remove the field or set it false, re-sign if necessary, and restart. Pairing with disable DevTools is a separate decision and requires its own capability/configuration.

Injected credentials and password store access are different features. This capability does not authorize either of them and does not restrict a privileged passwords.list() consumer into receiving masked strings.