If you put <INPUT TYPE=password> in the Help description of a field, the characters your user enters will be masked by the "*" character.
In Notes 4.6 and above, add "TYPE=password" to the HTML attributes of the field.