{"id":50813,"date":"2026-03-23T11:58:41","date_gmt":"2026-03-23T11:58:41","guid":{"rendered":"https:\/\/ubuntuhandbook.org\/?p=50813"},"modified":"2026-03-23T11:58:41","modified_gmt":"2026-03-23T11:58:41","slug":"ubuntu-26-04-sudo-asterisk-feedback-restore","status":"publish","type":"post","link":"https:\/\/ubuntuhandbook.org\/index.php\/2026\/03\/ubuntu-26-04-sudo-asterisk-feedback-restore\/","title":{"rendered":"Ubuntu 26.04 Now Shows Sudo Password Asterisk Feedback [How to Restore]"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"alignleft size-thumbnail wp-image-50249\" src=\"https:\/\/ubuntuhandbook.org\/wp-content\/uploads\/2025\/12\/resolute-icon-250x250.webp\" alt=\"\" width=\"250\" height=\"250\" srcset=\"https:\/\/ubuntuhandbook.org\/wp-content\/uploads\/2025\/12\/resolute-icon-250x250.webp 250w, https:\/\/ubuntuhandbook.org\/wp-content\/uploads\/2025\/12\/resolute-icon-300x300.webp 300w, https:\/\/ubuntuhandbook.org\/wp-content\/uploads\/2025\/12\/resolute-icon-700x700.webp 700w, https:\/\/ubuntuhandbook.org\/wp-content\/uploads\/2025\/12\/resolute-icon-768x768.webp 768w, https:\/\/ubuntuhandbook.org\/wp-content\/uploads\/2025\/12\/resolute-icon.webp 1200w\" sizes=\"auto, (max-width: 250px) 100vw, 250px\" \/><\/p>\n<p><b>Ubuntu 26.04 LTS finally breaks the longstanding security tradition by now displaying the asterisk feedback when typing sudo password in terminal or command console.<\/b><\/p>\n<p>As you know, most Linux distributions by default do not show any feedback when user is inputting password in terminal or any other command console for sudo authentication.<\/p>\n<p><!--more--><\/p>\n<p>This is <i>NOT<\/i> friendly for users who are new to Linux. User may think something (either keyboard or system) is broken and get stuck at the password input, and, some even report it as a <a href=\"https:\/\/bugs.launchpad.net\/ubuntu\/+source\/sudo\/+bug\/194472\" target=\"_blank\" rel=\"noopener\">bug<\/a>.<\/p>\n<p>Indeed, it&#8217;s a 46 years of Unix security tradition to prevent shoulder surfers (people who looking over your shoulder) from guessing the length of your password.<\/p>\n<p><b>It&#8217;s a feature, but not bug<\/b>, most Linux distributions keep this decision, though many users request for enabling the visual feedback.<\/p>\n<p><b>There&#8217;s a <code>pwfeedback<\/code> option allowing user to manually enable the password feedback<\/b>, though it had a <a href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2019-18634\" target=\"_blank\" rel=\"noopener\">vulnerability issue<\/a> that&#8217;s been fixed since version 1.8.31. And, some Distros (such as Linux Mint and elementary OS) has the option enabled out-of-the-box.<\/p>\n<div id=\"attachment_50814\" style=\"width: 620px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-50814\" class=\"size-large wp-image-50814\" src=\"https:\/\/ubuntuhandbook.org\/wp-content\/uploads\/2026\/03\/sudo-pwfeedback-700x483.webp\" alt=\"\" width=\"610\" height=\"421\" srcset=\"https:\/\/ubuntuhandbook.org\/wp-content\/uploads\/2026\/03\/sudo-pwfeedback-700x483.webp 700w, https:\/\/ubuntuhandbook.org\/wp-content\/uploads\/2026\/03\/sudo-pwfeedback-300x207.webp 300w, https:\/\/ubuntuhandbook.org\/wp-content\/uploads\/2026\/03\/sudo-pwfeedback-768x530.webp 768w, https:\/\/ubuntuhandbook.org\/wp-content\/uploads\/2026\/03\/sudo-pwfeedback.webp 886w\" sizes=\"auto, (max-width: 610px) 100vw, 610px\" \/><p id=\"caption-attachment-50814\" class=\"wp-caption-text\">Ubuntu 26.04 shows asterisk feedback for sudo password authentication<\/p><\/div>\n<p>As you may know, Ubuntu since 25.10 switched to <code>sudo-rs<\/code>, a rust-written memory safe implementation of <code>sudo<\/code> and <code>su<\/code>.<\/p>\n<p>The <code>sudo<\/code> command is now linked to the rust-based <code>sudo-rs<\/code>, so for end users it works visually just like before.<\/p>\n<div id=\"attachment_50815\" style=\"width: 620px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-50815\" class=\"size-large wp-image-50815\" src=\"https:\/\/ubuntuhandbook.org\/wp-content\/uploads\/2026\/03\/sudo-rs-link-700x444.webp\" alt=\"\" width=\"610\" height=\"387\" srcset=\"https:\/\/ubuntuhandbook.org\/wp-content\/uploads\/2026\/03\/sudo-rs-link-700x444.webp 700w, https:\/\/ubuntuhandbook.org\/wp-content\/uploads\/2026\/03\/sudo-rs-link-300x190.webp 300w, https:\/\/ubuntuhandbook.org\/wp-content\/uploads\/2026\/03\/sudo-rs-link-768x487.webp 768w, https:\/\/ubuntuhandbook.org\/wp-content\/uploads\/2026\/03\/sudo-rs-link.webp 778w\" sizes=\"auto, (max-width: 610px) 100vw, 610px\" \/><p id=\"caption-attachment-50815\" class=\"wp-caption-text\">sudo in ubuntu 26.04 is link to rust-based sudo implemention<\/p><\/div>\n<p><b>The <code>sudo-rs<\/code> upstream enabled <code>pwfeedback<\/code> option by default by releasing <a href=\"https:\/\/github.com\/trifectatechfoundation\/sudo-rs\/releases\/tag\/v0.2.13\" target=\"_blank\" rel=\"noopener\">version 0.2.13<\/a><\/b>, and implemented a feature allowing to press TAB to turn off the visual feedback at password prompt.<\/p>\n<blockquote><p><i>This fixes a major UX pain point for new users. Security is theoretically worse since password lengths are exposed to people watching your screen, but this is an infinitesimal benefit far outweighed by the UX issue. Outside of sudo\/login no other password entry interfaces omit asterisks (including others on Linux).<\/i><\/p><\/blockquote>\n<p>Ubuntu 26.04, so far has version 0.2.12, <a href=\"https:\/\/launchpad.net\/ubuntu\/+source\/rust-sudo-rs\/0.2.12-0ubuntu1\" target=\"_blank\" rel=\"noopener\">backported<\/a> the feature (but no TAB key disable function), so it now displays asterisk feedback when inputting password in command line.<\/p>\n<h3>How to Disable the Password Asterisk Feedback<\/h3>\n<p><b>Not only for Ubuntu 26.04, the steps below also work in Linux Mint 21\/22. <\/b><\/p>\n<p><b>And, current Ubuntu 20.04 ~ 24.04 may enable password feedback by following steps below but remove the exclamation point (!)<\/b><\/p>\n<p>Different to Linux Mint, the behavior in Ubuntu 26.04 with <code>sudo-rs<\/code> is implemented by embedding configuration value into source code. Though, user may override it by adding a custom rule.<\/p>\n<ul>\n<li>First, press <code>Ctrl+Alt+T<\/code> on keyboard to open up terminal window. When it opens, run command:\n<pre>sudo nano \/etc\/sudoers.d\/0pwfeedback<\/pre>\n<p>This command will create <code>0pwfeedback<\/code> file under <code>\/etc\/sudoers.d<\/code> directory (just like Linux Mint does) and open it with nano command line text editor.<\/li>\n<li>When file opens, simply insert the line below:\n<pre>Defaults !pwfeedback<\/pre>\n<p>NOTE: there&#8217;s an exclamation point (!) before <code>pwfeedback<\/code>, meaning to reverse that value!<\/li>\n<\/ul>\n<p>For Linux Mint, add an exclamation point (!) to the existing <code>pwfeedback<\/code> option instead of adding new line.<\/p>\n<p>Finally, press Ctrl+S to save, and Ctrl+X to exit nano command line text editor. And, the change will apply immediately!<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-large wp-image-50816\" src=\"https:\/\/ubuntuhandbook.org\/wp-content\/uploads\/2026\/03\/reverse-pwfeedback-700x520.webp\" alt=\"\" width=\"610\" height=\"453\" srcset=\"https:\/\/ubuntuhandbook.org\/wp-content\/uploads\/2026\/03\/reverse-pwfeedback-700x520.webp 700w, https:\/\/ubuntuhandbook.org\/wp-content\/uploads\/2026\/03\/reverse-pwfeedback-300x223.webp 300w, https:\/\/ubuntuhandbook.org\/wp-content\/uploads\/2026\/03\/reverse-pwfeedback-768x571.webp 768w, https:\/\/ubuntuhandbook.org\/wp-content\/uploads\/2026\/03\/reverse-pwfeedback.webp 1041w\" sizes=\"auto, (max-width: 610px) 100vw, 610px\" \/><\/p>","protected":false},"excerpt":{"rendered":"<p>Ubuntu 26.04 LTS finally breaks the longstanding security tradition by now displaying the asterisk feedback when typing sudo password in terminal or command console. As you know, most Linux distributions by default do not show any feedback when user is inputting password in terminal or any other command console for sudo authentication.<\/p>\n","protected":false},"author":1,"featured_media":50249,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9],"tags":[2039,2397],"class_list":["post-50813","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-howtos","tag-security","tag-ubuntu-26-04"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/ubuntuhandbook.org\/index.php\/wp-json\/wp\/v2\/posts\/50813","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ubuntuhandbook.org\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ubuntuhandbook.org\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ubuntuhandbook.org\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ubuntuhandbook.org\/index.php\/wp-json\/wp\/v2\/comments?post=50813"}],"version-history":[{"count":0,"href":"https:\/\/ubuntuhandbook.org\/index.php\/wp-json\/wp\/v2\/posts\/50813\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ubuntuhandbook.org\/index.php\/wp-json\/wp\/v2\/media\/50249"}],"wp:attachment":[{"href":"https:\/\/ubuntuhandbook.org\/index.php\/wp-json\/wp\/v2\/media?parent=50813"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ubuntuhandbook.org\/index.php\/wp-json\/wp\/v2\/categories?post=50813"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ubuntuhandbook.org\/index.php\/wp-json\/wp\/v2\/tags?post=50813"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}