To hide Windows’ password reveal button on Intune-managed devices, configure Microsoft’s DisablePasswordReveal policy and set it to Enabled. Microsoft documents device and user MDM paths for the setting, but the available evidence does not establish whether Intune currently exposes it in Settings Catalog or requires a custom profile. The policy applies to Windows 10 version 1703 and later on supported editions.
What the policy changes
The policy’s friendly name is “Do not display the password reveal button.” When enabled, the button that reveals a typed password is hidden. When disabled or not configured, the button remains displayed by default, according to Microsoft’s CredentialsUI Policy CSP documentation.
As an Amazon Associate I earn from qualifying purchases.
Microsoft says the policy applies to Windows components and applications that use Windows system controls, including Internet Explorer. That scope does not establish that it will hide reveal controls in every third-party application or custom-built password field.
Choose the policy scope
Microsoft documents the setting for both device and user scope. Use the scope that matches how you assign and manage the policy: device scope targets the device, while user scope targets the user.
#1 Best Overall
| Scope | MDM policy path |
|---|---|
| Device | ./Device/Vendor/MSFT/Policy/Config/CredentialsUI/DisablePasswordReveal |
| User | ./User/Vendor/MSFT/Policy/Config/CredentialsUI/DisablePasswordReveal |
Configure it through Intune
First check whether the current Intune Settings Catalog offers the policy. The reviewed Microsoft documentation does not confirm its present catalog availability or a specific portal path for this setting, so avoid assuming a menu route.
- Check Settings Catalog. In the Intune admin center, start a Windows configuration profile using the Settings Catalog and search for
DisablePasswordRevealor “Do not display the password reveal button.” If the setting is available, configure it as enabled, select the intended device or user scope, and assign the profile to the appropriate groups. - If it is not available, verify custom-profile support in your tenant. Use a custom OMA-URI configuration only if the current Intune interface supports the required Windows policy profile type. Microsoft’s documented policy path for the desired scope is shown above.
- Set the payload format and value correctly. This is an ADMX-backed policy. Microsoft specifies SyncML format
chr(string); the configuration payload must be XML-encoded unless the MDM supports CDATA. Follow Intune’s current field and payload requirements rather than copying an unverified example. - Deploy and check status. Assign the profile to the intended group, allow managed devices to sync, and review the profile’s deployment status in Intune. On a targeted device, check the password-entry experience in a Windows component or application that uses Windows system controls.
Microsoft maps the policy to CredUI.admx, under Windows Components > Credential User Interface. Its registry mapping is DisablePasswordReveal under SoftwarePoliciesMicrosoftWindowsCredUI. These mapping details identify the policy; they do not establish an Intune portal route.
Check Windows applicability
Microsoft lists support for Windows 10 version 1703 and later, including Pro, Enterprise, Education, and IoT Enterprise/IoT Enterprise LTSC editions. Confirm that the targeted devices run a listed edition and supported version before relying on this policy.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
What to check if the button still appears
- Confirm the profile reports successful deployment for the affected device or user, and that its assignment matches the scope you selected.
- Check that the policy is enabled rather than disabled or unconfigured.
- Test in a Windows component or application using Windows system controls. The documented scope does not guarantee behavior for third-party or custom password fields.
- If using a custom MDM profile, recheck the exact device or user URI, the
chrformat, and the payload encoding.
For the policy definition and MDM requirements, consult Microsoft’s CredentialsUI Policy CSP. For general Windows device-configuration profile context in Intune, see Microsoft’s Windows device restriction settings documentation.
Quick Recap
Rank #3
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
