Yes. By default, SQL Server does not set a password for sa which is a major security flaw. The first thing you should do when installing SQL Server is make sure the sa username has a password.

There will always be a series of asterisks in the password box and it does not correspond with the number of characters in the password. It is always the same number of asterisks.