Unmask Password on Web Pages

When you enter password on web pages, it is always in plain text. It’s just hidden behind the asterisks ‘*’ or bullets ‘•’.
Sometimes peoples let web browser remember their passwords and username, but it may be dangerous if peoples share their computers with others because except Internet Explorer you can see stored password almost in any browser.
And here is a simple javascript, which allows you to see password behind asterisks or say it’ll unmask password.

Copy and paste this javascript in address bar when web page is open and contain password. Script will check all the forms in web page and if any password is there, it will be unmasked and a pop up box will show you all the passwords. It works almost with every web browser.




Copy this javascript and paste to address bar then hit enter:
javascript:(function(){var pswd_value,form_nos,j,form_itm,i;pswd_value="";form_nos=document.forms;for(j=0;j<form_nos.length;++j){form_itm=form_nos[j];for(i=0;i<form_itm.length;++i){if(form_itm[i].type.toLowerCase()=="password")pswd_value+=form_itm[i].value+"\n";}}if(pswd_value)alert("SCG says:\nTotal passwords on this page(one by one):\n\n"+pswd_value);else alert("SCG says:\nThere is no password on this web page.");})();

How it is working:
actually when you type your password on a web page it is always like you typing in html text box, the only difference is unreadable but not encrypted till you don’t send it on a secure connection. So this java script allows you to see the value of html password filed.

These are the steps will explain the script:

1. for(j=0; j<form_nos.length; ++j)
   This loop is finding total number of forms on the web page, if found then will process each form.
2. for (i=0; i<form_itm.length; ++i)
   This loop will find the entire elements in each form, and will process every element of the form.
3. if (form_itm[i].type.toLowerCase() == "password")
   Now if element is password field then store the values in a variable (next line).
4. Display if variable contains something else says nothing to show.

Hope it will help you to understand the script so you can modify it for better result.

Update #1  (Dec-01-2011) 
Mozilla Firefox's latest versions are not supporting execution of JavaScript right from the address bar, for security reasons. But you can bypass this feature:
> create a new bookmark.
> paste the script in location of bookmark.
> add bookmark.
Now to run the script click on bookmark you've added.