Password fields
A credential field with a working visibility toggle.
Live preview
Visibility is changed locally; never transmit credentials in demos.
HTML
<div class="xsh-field xsh-measure">
<label class="xsh-label" for="xsh-pw">Account password</label>
<div class="xsh-input-action">
<input class="xsh-input" id="xsh-pw" type="password" value="S3cure-passphrase" autocomplete="new-password">
<button class="xsh-button xsh-button--secondary" type="button" aria-pressed="false" data-xsh-reveal="xsh-pw">Show</button>
</div>
<small class="xsh-help">Visibility is changed locally; never transmit credentials in demos.</small>
</div>Installation & markup
Include the local stylesheet and script once on the page, then place the component inside a data-xsh-ui root. The example above works without a build system.
<link rel="stylesheet" href="/dist/xshna-ui.css">
<div data-xsh-ui>
<!-- Add the HTML example above -->
</div>
<script defer src="/dist/xshna-ui.js"></script>Component API
Public classes, attributes and hooks used by this example. Keep the xsh- prefix intact.
| Identifier | Contract |
|---|---|
xsh-input-action | Used by the example markup and component styles or behavior. |
data-xsh-reveal | Used by the example markup and component styles or behavior. |
aria-pressed | Used by the example markup and component styles or behavior. |
Accessibility & keyboard
The button activates on Enter and Space, changing the input type and pressed state.
Implementation note. For real accounts provide an appropriate password policy and secure server-side handling.
Interaction contract
Behavioral components use the shared delegated runtime; visual-only primitives rely on semantic HTML and CSS. Runtime controls emit bubbling xsh:* CustomEvents; bind application handlers to those events when server persistence, API data or navigation is required.