you need an invisible input field (called shadow input or something like that) and a normal text that you're filling with *'s in the length of your string.