I'd like to suggest that all fields, not just password fields have the ability to mask their data. Perhaps a switch to allow masking to be turned on or off for any field?
At the very least, fields like bank account and routing numbers should be masked.