π Feature Request
π Feature Description
Add a 3-second auto-hide security timeout to the password
visibility toggle β when the user clicks the eye icon to
reveal their password, it should automatically hide again
after 3 seconds for security.
β Problem Statement
The Sign Up and Sign In pages have a password visibility
toggle (eye icon) that reveals the password when clicked.
However once revealed, the password stays visible
indefinitely β there is no automatic timeout to re-hide it.
This is a security concern:
- If a user reveals their password and walks away
from their screen, anyone nearby can read it
- No visual countdown or indication that the password
will auto-hide
- Industry best practice requires a short visibility
window for security
π‘ Proposed Solution
- When the eye icon is clicked to show the password,
start a 3-second timer
- After 3 seconds, automatically switch the field
back to type="password" and reset the eye icon
- Show a small countdown indicator (e.g. "Hiding in 3s")
near the eye icon so the user is aware
- If the user clicks the eye icon again before 3 seconds,
cancel the timer and hide immediately
π― Benefits
- Improves security by preventing shoulder-surfing
- Matches security-conscious UX patterns used by
banking and payment apps
- Small focused change with meaningful security impact
- No backend changes required
π Additional Context
- File to modify:
frontend/scripts/auth.js
- No backend changes required
- Reproducible on live site:
https://e-commerce-git-main-bhuvanshs-projects.vercel.app/signup.html
- Steps to reproduce:
- Go to /signup.html
- Click the eye icon on the password field
- Observe β password stays visible with no
auto-hide timeout
- Reference: Banking apps, Google, GitHub all
auto-hide passwords after a short timeout
π Feature Request
π Feature Description
Add a 3-second auto-hide security timeout to the password
visibility toggle β when the user clicks the eye icon to
reveal their password, it should automatically hide again
after 3 seconds for security.
β Problem Statement
The Sign Up and Sign In pages have a password visibility
toggle (eye icon) that reveals the password when clicked.
However once revealed, the password stays visible
indefinitely β there is no automatic timeout to re-hide it.
This is a security concern:
from their screen, anyone nearby can read it
will auto-hide
window for security
π‘ Proposed Solution
start a 3-second timer
back to type="password" and reset the eye icon
near the eye icon so the user is aware
cancel the timer and hide immediately
π― Benefits
banking and payment apps
π Additional Context
frontend/scripts/auth.jshttps://e-commerce-git-main-bhuvanshs-projects.vercel.app/signup.html
auto-hide timeout
auto-hide passwords after a short timeout