when you have an app designed for multiple accounts on one device with different passwords.when you have an app designed to be used my multiple users on one device.So when should you? I've encountered three kinds of applications More broadly speaking I agree that 99% of the time for applications you should not try to turn off password autocomplete. That said, I'd love to respond to the folks like that have very obviously never worked on certain kinds of systems where this is a necessity. I don't write the kinds of apps that necessitated this any more so I haven't kept up with techniques. This gist is pretty old and I'm sure that the right way to do this has evolved since it was written. I propose the following: autofill='mateimfuckinseriousdontautofillyouprick' But hey, what do I know, I'm just a developer of this system - surely the browser devs know what's best in my case /s It's frustrating and I absolutely hate the browsers for ignoring explicit commands to not fill these fields. It means that every time a user is updated, their password field needs to be stripped prior to saving the form, otherwise they adopt whatever password your browser remembered - which for the admin's case would likely be their password, or one of the other thousands of users' passwords. In my case, when an admin is updating a user account (or a user is updating their profile information) the browser is sticking its nose where it doesn't belong, prefilling the password field. There is no benefit in using an already saved password for a new account, the user should be forced to type it in (or paste if using a password manager).Įxactly. I want to disable this not for login, but for the new account form. People talking about not doing something that we should allowed to control. You, people here trying to mess with users, are the reason why browsers have to do extra work to be useful for their users. if there were no assholes abusing the flag for real login forms. It could be solved by all browsers obeying some simple flag. Easy, works, and is actually more unexpectedly auto-filling some fields in management forms is a real problem. You might still run into the two problems above, but at least you won't be messing up in a more global if you have a browser that is used on a shared system by hundreds of users, you disable password saving feature in that browser. If those are actually your users on platforms you control, you just disable password remembering feature in their browsers. do something else with their passwords that will make the security worse (simple passwords etc).It is a stupid idea that has been propagated too the responses by and explain the situation well.

How to turn off autocomplete