The software does not mask passwords during entry, increasing the potential for attackers to observe and capture passwords.