In the context of a web application, I will be providing the user the ability to provide a username and password for their MySQL database.
Right now, the username and password is generated randomly. These credentials (username, password) are show in plain text on the web application's Settings page. This seems perfectly acceptable for me, because, they are currently randomly generated.
However, as I'm now going to be allowing user provided passwords, I'm concerned that it might not be a good idea to show them in plain text.
Is there an industry standard that could relate to something I'm doing with user provided database passwords?
Should I not show the password in plain text, but only show a form to change the password only?