You can configure Mobile Portal Accelerator such that password characters are hidden in applications.
By default, passwords appear in the clear when entered. Because many mobile applications do not rely on password authentication, and because entering text on mobile devices is not always easy, many service providers support password entry in the clear. Depending on your configuration settings, you can modify either the Login.jsp or the LoginView.jsp (Mobile Login portlet) to hide the password as it is typed in the login fields.
The Login.jsp file is located in the wp_profile_root/installedApps/node_name/MPATheme.ear/MPATheme.war/screens/xdime directory.
To change the password display to hide the password characters as they are typed, add a type attribute to the xftextinput element as shown in the following example.
<xftextinput name="password" entryPane="FI_1" maxLength="20"
captionPane="FT_1" caption='<wps:text key="password" bundle="nls.field"/>'/>
to:<xftextinput name="password" entryPane="FI_1" maxLength="20" type="password"
captionPane="FT_1" caption='<wps:text key="password" bundle="nls.field"/>'/>
jar -xvf PA_MWPLogin.war WEB-INF/jsp/xdime/LoginView.jsp
<xftextinput name="<%=Login.PASSWORD_FIELD_ID%>" entryPane="FI.1" maxLength="20"
captionPane="FT.1" caption='<fmt:message key="login.label.password"/>'/>
to:<xftextinput name="<%=Login.PASSWORD_FIELD_ID%>" entryPane="FI.1" maxLength="20" type="password"
captionPane="FT.1" caption='<fmt:message key="login.label.password"/>'/>
jar -uvf PA_MWPLogin.war WEB-INF/jsp/xdime/LoginView.jsp