Is the calculus on this still the same? This past weekend I watched my father resetting his password for our Discourse site and then use the new password to log in, and it was a real struggle. It would have been really helpful to have the reveal password feature that has become prevalent on the Internet so that he could know for sure that he knows the password he is entering, especially on moble but also on desktop. In the end we had him create the password on desktop using his new password manager, and then copy/paste it from there into discourse.
Discourse login page, on desktop in chrome:
Discourse on desktop in safari shows a little password pulldown that does not include reveal:
For comparison, twitter:
facebook:
the google:
linkedin:
