Disable autocomplete for all sensitive fields

Chakra Mamidala

Disable autocomplete for all sensitive fields

For each sensitive field in the HTML, set the "autocomplete" attribute to "off". For example:

<input type="password" autocomplete="off" name="pw">

If there are many fields, it may be faster to set the "autocomplete" attribute to "off" in the outer <form> tag. For example:

<form action="/login.jsp" autocomplete="off" name="pw"> <input type="password" name="pw"> </form>

Nic Brough -Adaptavist-

Do not do this, it reduces security.

Some password safes need the autocomplete to be enabled for them to put in secured details.  If you stop people using a password safe, then they will start doing things like reusing passwords, using absolutely minimally complex passwords and writing them down on post-its next to their computer.  Please, don't do things that make security harder for your humans.