12.7 Passwords And Sensitive Content

Use M-x eat-send-password RET for a terminal password. In character mode, first press M-RET to return to semi-character mode so command entry reaches Emacs rather than the terminal program. Enter the secret only in the protected password prompt. EAT uses Emacs’s password reader rather than recording those keystrokes in command lossage. Emacsvox suppresses observation and bell speech during the command, clears content-bearing retained state before and after it, and announces only whether secure input was sent or cancelled.

Ordinary no-echo input does not establish that boundary. EAT exposes no public echo-state signal, and a quiet repaint is not evidence of password entry. Typing a secret through normal terminal input can leave keystrokes in Emacs lossage. Backspace or Delete may give a content-free deletion tone, but speech names content only when one unambiguous visible removal is exposed.

Selected foreground output can contain sensitive information and be spoken. Frozen review is a real in-memory copy until killed, although visually concealed cells are redacted when captured. Verbose title and directory announcements can disclose host/path metadata. Background monitoring, by contrast, never reads content or terminal identity.