Jakob Nielsen: "Stop Password Masking"
Summary:Usability suffers when users type in passwords and the only feedback they get is a row of bullets. Typically, masking passwords doesn't even increase security, but it does cost you business due to login failures. http://www.useit.com/alertbox/passwords.html