I've noticed that on many sites, when they ask for a [one-time password](https://en.wikipedia.org/wiki/One-time_password) (OTP) (usually sent by SMS), the input is hidden in the same way as a password field is.

My understanding is that once an OTP is used, then it is no longer useful for anything.

Is there a valid reason for hiding the input for these fields?