Be sure to reverse the print and noecho:

ReadMode 'noecho';
print "\nEnter your password: ";
[download]

For typical uses, the difference isn't noticeable, but if you'd ever used Expect, you'd be quick to make that change. Don't prompt for the password until you've ensured it won't echo, or there's the possibility that the password will be entered (and echoed) before you disable echo.