Ubuntu 26.04 Ends 46 Years of Silent sudo Passwords (pbxscience.com)

Article summary

Ubuntu 26.04 will display an asterisk for each keystroke when entering a sudo password, ending a 46-year tradition of silent password input. This change is part of a broader effort to modernize Ubuntu's core utilities and improve user experience. The decision has sparked debate among users and developers, with some arguing that it compromises security and others seeing it as a minor issue. The traditional silent prompt can still be restored with a configuration change.

Main themes

• sudo password input
• Ubuntu 26.04 changes
• security vs usability
• Linux terminal behavior
• password security

What commenters say

• Knowing the length of a password can make it easier to crack, and displaying asterisks for each keystroke compromises security.
• The security benefit of hiding password length is negligible in practice, and the change improves user experience.
• Most users' sudo passwords are the same as their login passwords, which are already visible as placeholder dots on the graphical login screen, making the silent prompt unnecessary.
• Displaying asterisks for each keystroke can actually encourage users to choose longer, more secure passwords since typos are easier to spot and fix.
• The change is a minor issue and not a significant security risk, as evidenced by the lack of concern from auditors and security standards.
• Bad security UX can lead to users bypassing security mechanisms entirely, and the change may ultimately improve security by making sudo more user-friendly.
• The traditional silent prompt should be preserved as an option for users who value the additional security, even if it is not enabled by default.
• The debate over displaying asterisks for sudo passwords is a minor issue compared to other security concerns and usability problems in Linux.