Hide the Windows password reveal button with Group Policy

A password field can show an eye button that reveals what you typed. Hiding it can prevent someone nearby from seeing the password when the button is pressed. To hide it in Windows system controls, enable Do not display the password reveal button.

Problems this policy can address

The button can expose a password to someone nearby when pressed. Enabling the policy hides it in components and apps that use Windows system controls. Apps or websites with their own buttons may still show them; this setting does not guarantee protection against malware.

Steps

1. Open the local Group Policy Editor with gpedit.msc.
2. Under Computer Configuration or User Configuration, navigate to Computer Configuration › Administrative Templates › Windows Components › Credential User Interface and open the policy.
3. Select Enabled and apply the change. To restore the button, select Disabled or Not Configured.

Registry settings

Open Registry Editor with regedit. Choose the HKLM path for the computer or HKCU path for the user. Before changing it, export the key as a backup and record whether the value existed and its original data. Create or edit the DWORD value below and set it to 1; check the value in Registry Editor. If the value was originally absent, delete it to undo the manual change. If the value previously existed, a procedure for restoring its original data has not been confirmed. A value of 0 corresponds to the disabled setting. The registry action for the not-configured state is not confirmed.

See the registry value page for the confirmed value details.

HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CredUI
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CredUI
DisablePasswordReveal: REG_DWORD
1 = Enabled
0 = Disabled

Based on the Windows 11 version 26H2 policy templates.

References

• Microsoft: CredentialsUI Policy CSP