This topic is related to Keylogger Resistance - Feature Requests / Password Manager - Bitwarden Community Forums where limitations of virtual keyboards and pass-pictures are discussed in more detail. As short example, a virtual keyboard helps against a physical keyboard logger − which is usually easier to install on public devices because keyboard must be accessible to users − but won’t help against software loggers recording not only keyboard but also screen and mouse actions − which are easy to install for the administrators of public devices, but will be more difficult to install by users on public devices where no portable devices can be attached and only a very restrictive software environment is accessible. So a virtual keyboard can raise the bar for attackers, but can only protect against some forms of compromising public/shared devices.