Masking user input in python with asterisks [duplicate]

Question

I am trying to mask what the user types into IDLE with asterisks so people around them can't see what they're typing/have typed in. I'm using basic raw input to collect what they type.

key = raw_input('Password :: ')

Ideal IDLE prompt after user types password:

Password :: **********

Odessa

You will have to do some custom stdout redirection to mask with asterisks, but there is an easier way to get passwords https://mcmap.net/q/135082/-read-password-from-stdin-duplicate – Quarterhour

Answer 1

Depending on the OS, how you get a single character from user input and how to check for the carriage return will be different.

See this post: Python read a single character from the user

On OSX, for example, you could so something like this:

import sys, tty, termios

def getch():
    fd = sys.stdin.fileno()
    old_settings = termios.tcgetattr(fd)
    try:
        tty.setraw(sys.stdin.fileno())
        ch = sys.stdin.read(1)
    finally:
        termios.tcsetattr(fd, termios.TCSADRAIN, old_settings)
    return ch

key = ""
sys.stdout.write('Password :: ')
while True:
    ch = getch()
    if ch == '\r':
        break
    key += ch
    sys.stdout.write('*')
print
print key

Hawser

Answer 2

If you want a solution that works on Windows/macOS/Linux and on Python 2 & 3, you can install the pwinput module:

pip install pwinput

Unlike getpass.getpass() (which is in the Python Standard Library), the pwinput module can display *** mask characters as you type.

Example usage:

>>> pwinput.pwinput()
Password: *********
'swordfish'
>>> pwinput.pwinput(mask='X') # Change the mask character.
Password: XXXXXXXXX
'swordfish'
>>> pwinput.pwinput(prompt='PW: ', mask='*') # Change the prompt.
PW: *********
'swordfish'
>>> pwinput.pwinput(mask='') # Don't display anything.
Password:
'swordfish'

Unfortunately this module, like Python's built-in getpass module, doesn't work in IDLE or Jupyter Notebook.

More details at https://pypi.org/project/pwinput/

Note that pwinput is the new name for the stdiomask module.

Yeseniayeshiva

this didn't work for me with PyCharm Console with Python 3.7, but neither does getpass.getpass. Both just use something like input. This appears to be a PyCharm limitation and not a problem with your library. – Assr

Is there a way to get this to work in Jupyter notebook please? – Calfee

Unfortunately it's not possible to get it working in Jupyter notebook. It's very much tied to command line/terminal windows, so a system that works in a browser (like Jupyter) or provides it's own text output screen (like VS Code) won't execute the terminal control codes that erase text the way a command line window would. – Yeseniayeshiva

Thanks. Seems same problem for IDLE where it echoes and displays password. – Calfee

Minor note: stdiomask is now called pwinput. You would run import pwinput and then call pwinput.pwinput() – Yeseniayeshiva

Answer 3

To solve this I wrote this small module pyssword to mask the user input password at the prompt. It works with windows. The code is below:

from msvcrt import getch
import getpass, sys

def pyssword(prompt='Password: '):
    '''
        Prompt for a password and masks the input.
        Returns:
            the value entered by the user.
    '''

    if sys.stdin is not sys.__stdin__:
        pwd = getpass.getpass(prompt)
        return pwd
    else:
        pwd = ""        
        sys.stdout.write(prompt)
        sys.stdout.flush()        
        while True:
            key = ord(getch())
            if key == 13: #Return Key
                sys.stdout.write('\n')
                return pwd
                break
            if key == 8: #Backspace key
                if len(pwd) > 0:
                    # Erases previous character.
                    sys.stdout.write('\b' + ' ' + '\b')                
                    sys.stdout.flush()
                    pwd = pwd[:-1]                    
            else:
                # Masks user input.
                char = chr(key)
                sys.stdout.write('*')
                sys.stdout.flush()                
                pwd = pwd + char

Unmitigated

Has this been tested on Linux/MacOS? – Centrist

Answer 4

Disclaimer: does not provide the asterix in terminal, but it does so in jupyter notebook.

The below code provides replaces written characters with asterix and allow for deletion of wrongly typed characters. The number of asterixes reflects the number of typed characters.

import getpass
key = getpass.getpass('Password :: ')

And after the user press enter:

Fate

Although your code snippet might solve the issue, you should describe what’s the purpose of your code (how it solves the problem). Furthermore, you might want to check stackoverflow.com/help/how-to-answer – Terribly

When run on a terminal or command line, getpass hides the input completely. No asterisks are displayed. – Centrist

Answer 5

I stumbled upon this thread while I was trying to preform the same feat. I know this thread is old, but if anyone else needs this - here is how I did it.

I ended up using readchar package.

Here is my solution, it prints asterisks and also handles backspaces:

import sys, readchar

def passprompt(prompt: str, out = sys.stdout) -> str:
    out.write(prompt); out.flush()
    password = ""
    while True:
        ch = str(readchar.readchar(), encoding='UTF-8')
        if ch == '\r':
            break
        elif ch == '\b':
            out.write('\b \b')
            password = password[0:len(password)-1]
            out.flush()
        else: 
            password += ch
            out.write('*')
            out.flush()
    return password

I had to regularly flush stdout for it to work.

Butterfish

Answer 6

My suggestion is -- DO NOT DO IT!

Don't reinvent the wheel, use a password helper if you want 'stars'

See https://mcmap.net/q/87684/-how-do-i-convert-a-password-into-asterisks-while-it-is-being-entered-duplicate

Annual