Repository navigation
cargo login shows passwords in plain text #7813
Description
Describe the problem you are trying to solve
When I run cargo login, it tells me to type in my password then shows the password in plaintext.
Describe the solution you'd like
cargo login should either show no output (like sudo) or only asterisks (like openvpn or a user login screen).
Notes
I don't like the idea that someone looking over my shoulder can see my passwords.
Activity
stefanhoelzl commentedon Jan 20, 2020
what password you are required to enter?
when I run
cargo loginI am only prompted to enter a API token.jyn514 commentedon Jan 20, 2020
Yes, the API token is what I mean.
Hide the token in plain text when `cargo login`
epage commentedon Nov 3, 2023
#7869 used rpassword. Looks like this is used in sequoia-openpgp among many other places.
dialoguer is another potential library for this.
ehuss commentedon Jun 15, 2026
The cargo team discussed this issue (notes). I was not at the meeting, but it looks like the team was generally positive to supporting this, but there was some question about exactly which crate to use to support this. There are some thoughts in the linked notes.