cargo login shows passwords in plain text

[jyn514]

Describe the problem you are trying to solve
When I run cargo login, it tells me to type in my password then shows the password in plaintext.

Describe the solution you'd like
cargo login should either show no output (like sudo) or only asterisks (like openvpn or a user login screen).

Notes
I don't like the idea that someone looking over my shoulder can see my passwords.

[stefanhoelzl]

what password you are required to enter?

when I run cargo login I am only prompted to enter a API token.

[jyn514]

Yes, the API token is what I mean.

[epage]

#7869 used rpassword. Looks like this is used in sequoia-openpgp among many other places.

dialoguer is another potential library for this.