diff --git a/assets/stylesheets/options.css b/assets/stylesheets/options.css
index bbaa715..582c650 100644
--- a/assets/stylesheets/options.css
+++ b/assets/stylesheets/options.css
@@ -36,14 +36,17 @@ label p {
   font-weight: normal;
 }
 
-.form-options input[type=text] {
+.form-options input[type=text],
+.form-options input[type=password] {
+
   width: 100%;
   padding: 1rem;
 }
 
 
+.host-options ul li input[type=text],
+.host-options ul li input[type=password] {
 
-.host-options ul li input[type=text] {
   width: 60%;
 }
 
diff --git a/options.html b/options.html
index a92c9a6..f7314ae 100644
--- a/options.html
+++ b/options.html
@@ -57,17 +57,22 @@ <h3>Default Options</h3>
             Servlet context
             <br/>
             <input type="text" ng-model="options.servletContext"/>
-          </label>
+        </label>
+
+        <p>
+            Note that existing login-tokens associated w/ the tab's host will override these settings.
+        </p>
+
         <label class="text">
             Web console user
             <br/>
             <input type="text" ng-model="options.user"/>
-          </label>
+        </label>
         <label class="text">
             Web console password
             <br/>
-            <input type="text" ng-model="options.password"/>
-          </label>
+            <input type="password" ng-model="options.password"/>
+        </label>
       </form>
 
       <h3>Host Configurations</h3>
@@ -115,7 +120,7 @@ <h3>Host Configurations</h3>
         <label class="text">
             Web console password
             <br/>
-            <input type="text" ng-model="tabHostOption.password"/>
+            <input type="password" ng-model="tabHostOption.password"/>
           </label>
 
         <button ng-click="options.tabHostOptions.splice($index, 1)">Remove this Host Configuration</button>