Input type password don t let browser remember the password

Question

I remember seeing a way to have an  lt input type  password    gt  such that the browser will not prompt the user to save the password  But I m drawing a blank  Is there an HTML attribute or some JavaScript trick that will do this

User · Answer

lt input type  password  placeholder  Enter New Password  autocomplete  new-password  gt    Here you go

User · Answer

Try using autocomplete  off    Not sure if every browser supports it  though   MSDN docs here   EDIT  Note  most browsers have dropped support for this attribute  See Is autocomplete  quot off quot  compatible with all modern browsers   This is arguably something that should be left up to the user rather than the web site designer

User · Answer

Read also this answer where he is using this easy solution that works everywhere  see also the fix for Safari mobile     lt input type  password  readonly onfocus  this removeAttribute  readonly      gt

User · Answer

I ve found the following works on Firefox and Chrome    lt form      gt   lt  -- more stuff -- gt   lt input name  person  type  text  size 30 value    gt   lt input name  mypswd  type  password  size 6 value    autocomplete  off  gt   lt input name  userid  type  text  value  security  style  display none  gt   lt input name  passwd  type  password  value  faker  style  display none  gt   lt  -- more stuff -- gt   lt  form gt    All of these are within the forms section   person  and  mypswd  are what you want  but the browser will save  userid  and  passwd  once  and never again since they don t change  You could eliminate the  person  field if you don t really need it  In that case  all you want is the  mypswd  field  which could change in some way known to the user of your web-page

User · Answer

You can use JQuery  select the item by id      input Password   attr  autocomplete   off      Or select the item by type      input type  password     attr  autocomplete   off      Or also   You can use pure Javascript   document getElementById  Password   autocomplete    off

User · Answer

In the case of most major browsers  having an input outside of and not connected to any forms whatsoever tricks the browser into thinking there was no submission  In this case  you would have to use pure JS validation for your login and encryption of your passwords would be necessary as well   Before    lt form action       gt  lt input type  password   gt  lt  form gt    After    lt input type  password   gt

User · Answer

I ve found the following works on Firefox and Chrome    lt form      gt   lt  -- more stuff -- gt   lt input name  person  type  text  size 30 value    gt   lt input name  mypswd  type  password  size 6 value    autocomplete  off  gt   lt input name  userid  type  text  value  security  style  display none  gt   lt input name  passwd  type  password  value  faker  style  display none  gt   lt  -- more stuff -- gt   lt  form gt    All of these are within the forms section   person  and  mypswd  are what you want  but the browser will save  userid  and  passwd  once  and never again since they don t change  You could eliminate the  person  field if you don t really need it  In that case  all you want is the  mypswd  field  which could change in some way known to the user of your web-page

User · Answer

Try using autocomplete  off    Not sure if every browser supports it  though   MSDN docs here   EDIT  Note  most browsers have dropped support for this attribute  See Is autocomplete  quot off quot  compatible with all modern browsers   This is arguably something that should be left up to the user rather than the web site designer

User · Answer

I tried the following and it seems that works to any browser    lt input id  passfld  type  text  autocomplete  off    gt    lt script type  text javascript  gt        function              var passElem      input passfld            passElem focus function                  passElem prop  type    password                                                                      lt  script gt    This way is much more safer than using timeout techniques  because it guaranties that the input field will yield to password when the user focuses it

User · Answer

Read also this answer where he is using this easy solution that works everywhere  see also the fix for Safari mobile     lt input type  password  readonly onfocus  this removeAttribute  readonly      gt

User · Answer

lt input type  password  autocomplete  off    gt   I d just like to add that as a user I think this is very annoying and a hassle to overcome  I strongly recommend against using this as it will more than likely aggravate your users   Passwords are already not stored in the MRU  and correctly configured public machines will not even save the username

User · Answer

lt input type  password  placeholder  Enter New Password  autocomplete  new-password  gt    Here you go

User · Answer

Here s the best answer  and the easiest  Put an extra password field in front of your input field and set the display none   so that when the browser fills it in  it does it in an input that you don t care about   Change this    lt input type  password  name  password  size  25  class  input  id  password  value    gt    to this    lt input type  password  style  display none   gt   lt input type  password  name  password  size  25  class  input  id  password  value    gt

User · Answer

The only way I can get firefox  edge  and Internet explorer to turn off autocomplete is to add autocomplete  false  in my form statement like      lt form action  postingpage php  autocomplete  false  method  post  gt    and I have to add the autocomplete  off  to my form input and change the type to text Like         lt input type  text  autocomplete  off  gt    It seems that this html code needs to be standardized with the browsers  the form type   password should be revised so that it overrides browser settings   The only issue I have is that I lost my input masking  But on the bright side the annoying  this site is not secure  is not showing up in firefox     for me  its not a big deal since the user is already authenticated and its my change user name and password portion of it

User · Answer

In the case of most major browsers  having an input outside of and not connected to any forms whatsoever tricks the browser into thinking there was no submission  In this case  you would have to use pure JS validation for your login and encryption of your passwords would be necessary as well   Before    lt form action       gt  lt input type  password   gt  lt  form gt    After    lt input type  password   gt

User · Answer

Try using autocomplete  off    Not sure if every browser supports it  though   MSDN docs here   EDIT  Note  most browsers have dropped support for this attribute  See Is autocomplete  quot off quot  compatible with all modern browsers   This is arguably something that should be left up to the user rather than the web site designer

User · Answer

you can also use it like following      Password   attr  autocomplete    off    setTimeout      Password   val        2000

User · Answer

lt input type  password  autocomplete  off    gt   I d just like to add that as a user I think this is very annoying and a hassle to overcome  I strongly recommend against using this as it will more than likely aggravate your users   Passwords are already not stored in the MRU  and correctly configured public machines will not even save the username

User · Answer

lt input type  password  autocomplete  off    gt   I d just like to add that as a user I think this is very annoying and a hassle to overcome  I strongly recommend against using this as it will more than likely aggravate your users   Passwords are already not stored in the MRU  and correctly configured public machines will not even save the username

User · Answer

As for security issues  here is what a security consultant will tell you on the whole field issue  this is from an actual independent security audit       HTML Autocomplete Enabled     Password fields in HTML forms have autocomplete enabled  Most browsers have a facility to remember user credentials entered into HTML forms       Relative Risk  Low      Affected Systems Devices       o https              I also agree this should cover any field that contains truly private data   I feel that it is alright to force a person to always type their credit card information  CVC code  passwords  usernames  etc whenever that site is going to access anything that should be kept secure  universally or by legal compliance requirements   For example  purchase forms  bank credit sites  tax sites  medical data  federal  nuclear  etc - not Sites like Stack Overflow or Facebook   Other types of sites - e g  TimeStar Online for clocking in and out of work - it s stupid  since I always use the same PC account at work  that I can t save the credentials on that site - strangely enough I can on my Android but not on an iPad  Even shared PCs this wouldn t be too bad since clocking in out for someone else really doesn t do anything but annoy your supervisor   They have to go in and delete the erroneous punches - just choose not to save on public PCs

User · Answer

seeing as autocomplete off is deprecated  I suggest a more recent solution   Set your password field to a normal text field  and mask your input with  discs  using CSS  the code should look like this    lt input type  text  class  myPassword    gt    input  myPassword      text-security disc      -webkit-text-security disc      -mox-text-security disc      Please note that this may not work propely on firefox browsers  and an additional walkaround is needed  Read more about it here  https   stackoverflow com a 49304708 5477548   The solution was taken from this link  but to comply with SO  no-hotlinks  i summarized it here

User · Answer

As for security issues  here is what a security consultant will tell you on the whole field issue  this is from an actual independent security audit       HTML Autocomplete Enabled     Password fields in HTML forms have autocomplete enabled  Most browsers have a facility to remember user credentials entered into HTML forms       Relative Risk  Low      Affected Systems Devices       o https              I also agree this should cover any field that contains truly private data   I feel that it is alright to force a person to always type their credit card information  CVC code  passwords  usernames  etc whenever that site is going to access anything that should be kept secure  universally or by legal compliance requirements   For example  purchase forms  bank credit sites  tax sites  medical data  federal  nuclear  etc - not Sites like Stack Overflow or Facebook   Other types of sites - e g  TimeStar Online for clocking in and out of work - it s stupid  since I always use the same PC account at work  that I can t save the credentials on that site - strangely enough I can on my Android but not on an iPad  Even shared PCs this wouldn t be too bad since clocking in out for someone else really doesn t do anything but annoy your supervisor   They have to go in and delete the erroneous punches - just choose not to save on public PCs

User · Answer

I solved in another way  You can try this    lt input id  passfld  type  text  autocomplete  off    gt   lt script type  text javascript  gt     Using jQuery   function                                                       setTimeout function               input passfld   attr  type   password          10            or in pure javascript  window onload function                                                      setTimeout function              document getElementById  passfld   type    password         10           lt  script gt     another way    lt script type  text javascript  gt       function setAutoCompleteOFF tm       if typeof tm    undefined   tm 10       try      var inputs     auto-complete-off input autocomplete off          setTimeout function            inputs each function                     var old value   this  attr  value                            var thisobj   this                           setTimeout function                      thisobj removeClass  auto-complete-off   addClass  auto-complete-off-processed                    thisobj val old value                 tm                       tm         catch e           function                                                          setAutoCompleteOFF             lt  script gt       you need to add attribute autocomplete  off  or you can add class  auto-complete-off into the input box and enjoy  Example      lt input id  passfld  type  password  autocomplete  off    gt      OR    lt input id  passfld  class  auto-complete-off  type  password     gt

User · Answer

you can also use it like following      Password   attr  autocomplete    off    setTimeout      Password   val        2000

User · Answer

I tried the following and it seems that works to any browser    lt input id  passfld  type  text  autocomplete  off    gt    lt script type  text javascript  gt        function              var passElem      input passfld            passElem focus function                  passElem prop  type    password                                                                      lt  script gt    This way is much more safer than using timeout techniques  because it guaranties that the input field will yield to password when the user focuses it

User · Answer

Try using autocomplete  off    Not sure if every browser supports it  though   MSDN docs here   EDIT  Note  most browsers have dropped support for this attribute  See Is autocomplete  quot off quot  compatible with all modern browsers   This is arguably something that should be left up to the user rather than the web site designer

User · Answer

seeing as autocomplete off is deprecated  I suggest a more recent solution   Set your password field to a normal text field  and mask your input with  discs  using CSS  the code should look like this    lt input type  text  class  myPassword    gt    input  myPassword      text-security disc      -webkit-text-security disc      -mox-text-security disc      Please note that this may not work propely on firefox browsers  and an additional walkaround is needed  Read more about it here  https   stackoverflow com a 49304708 5477548   The solution was taken from this link  but to comply with SO  no-hotlinks  i summarized it here

User · Answer

You can use JQuery  select the item by id      input Password   attr  autocomplete   off      Or select the item by type      input type  password     attr  autocomplete   off      Or also   You can use pure Javascript   document getElementById  Password   autocomplete    off

User · Answer

lt input type  password  autocomplete  off    gt   I d just like to add that as a user I think this is very annoying and a hassle to overcome  I strongly recommend against using this as it will more than likely aggravate your users   Passwords are already not stored in the MRU  and correctly configured public machines will not even save the username

User · Answer

The only way I can get firefox  edge  and Internet explorer to turn off autocomplete is to add autocomplete  false  in my form statement like      lt form action  postingpage php  autocomplete  false  method  post  gt    and I have to add the autocomplete  off  to my form input and change the type to text Like         lt input type  text  autocomplete  off  gt    It seems that this html code needs to be standardized with the browsers  the form type   password should be revised so that it overrides browser settings   The only issue I have is that I lost my input masking  But on the bright side the annoying  this site is not secure  is not showing up in firefox     for me  its not a big deal since the user is already authenticated and its my change user name and password portion of it

User · Answer

I solved in another way  You can try this    lt input id  passfld  type  text  autocomplete  off    gt   lt script type  text javascript  gt     Using jQuery   function                                                       setTimeout function               input passfld   attr  type   password          10            or in pure javascript  window onload function                                                      setTimeout function              document getElementById  passfld   type    password         10           lt  script gt     another way    lt script type  text javascript  gt       function setAutoCompleteOFF tm       if typeof tm    undefined   tm 10       try      var inputs     auto-complete-off input autocomplete off          setTimeout function            inputs each function                     var old value   this  attr  value                            var thisobj   this                           setTimeout function                      thisobj removeClass  auto-complete-off   addClass  auto-complete-off-processed                    thisobj val old value                 tm                       tm         catch e           function                                                          setAutoCompleteOFF             lt  script gt       you need to add attribute autocomplete  off  or you can add class  auto-complete-off into the input box and enjoy  Example      lt input id  passfld  type  password  autocomplete  off    gt      OR    lt input id  passfld  class  auto-complete-off  type  password     gt

User · Answer

Here s the best answer  and the easiest  Put an extra password field in front of your input field and set the display none   so that when the browser fills it in  it does it in an input that you don t care about   Change this    lt input type  password  name  password  size  25  class  input  id  password  value    gt    to this    lt input type  password  style  display none   gt   lt input type  password  name  password  size  25  class  input  id  password  value    gt

[html] Input type=password, don't let browser remember the password

Examples related to html

Examples related to passwords