<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
Okta Password is Showing as Plain Text in the Browser Developer Tools
Okta Classic Engine
Okta Identity Engine
Administration
Overview

Users can view their password in plain text in the browser developer tools if they check the payload sent to Okta after authentication.

Applies To
  • Security
  • Password Authenticator
  • Okta Identity Engine
  • Okta Classic Engine
Solution
The AuthN request will contain the username and password and will be sent to Okta over HTTPS. It would not be in plaintext since the communication is encrypted via TLS. The Okta user can see the request details in their web browser developer tools because they originated the request. This is standard practice and is to be expected throughout all web applications.
Loading
Okta Password is Showing as Plain Text in the Browser Developer Tools