Passwords: to mask or not to mask?

Jakob Nielsen: > Usability suffers when users type in passwords and the only feedback they get is a row of bullets. Typically, masking passwords doesn't even increase security, but it does cost you business due to login failures. I'm not sure I fully agree. I once ran across a site that didn't mask the password field and I was immediately suspicious. It'll be hard to break convention and habit.