Finally! A best practice that makes sense! Now let us see the password as we "type" on rinky dink cell phone virtual keyboards!
Having password masked makes sense by default, but I agree users should be able to see passwords explicitly by tapping an "eye" icon.
And those of us unfortunate to use applications that forbid copy-paste on password fields.