Secure String visibility

Can you set the secure string visibility default to hidden so as the User types, their input is masked?

This should work out of the box! What do your settings look like? Format “password” should mask the input.