This isn't a Bug. This is intended behavior and something that was just changed during the 6.31 patch that came out today. Quote from the Patch Notes: "In order to better facilitate login, one-time passwords will no longer be hidden during entry."