Bad: ```python input("Password: ") ``` Good: ```python getpass.getpass("Password: ") ``` See [getpass](https://docs.python.org/3/library/getpass.html). We can probably just look for `input` calls that contain the string literal `'password'`.
