## Problem We have constantly fluctuated between 2 states when people do `coder login`: 1. Show the token in plaintext when the CLI token is pasted (not ideal, security risk) 2. Show nothing when the CLI token is pasted (not ideal, unclear UX) ## Suggestion When the token is pasted, show ********** to replace what is pasted. Some context and implementation details [here](https://coder.zendesk.com/agent/tickets/3430)