It's never a good idea to show the current password as a result of any kind of "I forgot my password" feature. This could allow someone to see the password that is not supposed to, which is bad if the rightful owner also uses that password for other things. It's better to just reset the password after the person answers some security questions or whatever.