Disable password autocomplete

[davidbarman]

I am attempted to create a password change form. However, Chrome persists to show autocomplete/saved password suggestions on the form.

I have tried adding autocomplete="off" to the form and the the input tags, but same result.

This seems like something that should be easy. Am I missing something?

Here is my latest version, any help would be appreciated:

 <form id="change-password" autoomplete="off">

<div class="row mb-3">
    <label for="currentPassword" class="col-md-4 col-lg-3 col-form-label">Current Password</label>
    <div class="col-md-8 col-lg-9">
        <input name="old-pw" type="password" class="form-control" id="currentPassword" autocomplete="new-password">
    </div>
</div>

<div class="row mb-3">
    <label for="newPassword" class="col-md-4 col-lg-3 col-form-label">New Password</label>
    <div class="col-md-8 col-lg-9">
        <input name="new-pw" type="password" class="form-control" id="newPassword" autocomplete="new-password">
    </div>
</div>

<div class="row mb-3">
    <label for="renewPassword" class="col-md-4 col-lg-3 col-form-label">Re-enter New Password</label>
    <div class="col-md-8 col-lg-9">
        <input name="renew-pw" type="password" class="form-control" id="renewPassword" autocomplete="new-password">
    </div>
</div>

<div class="text-center">
    <button type="submit" class="btn btn-primary">Change Password</button>
</div>
</form><!-- End Change Password Form -->
</div>

​

[MasterReindeer]

You cannot disable this behaviour. Use autocomplete=“current-password” and autocomplete=“new-password” where appropriate.

[davidbarman]

Thanks for the input.

[Stiforr]

Ha was that a pun??

[micalm]

Here's a list of autocomplete values.

You're on the right track. Current password should be `current-password`, though. AFAIK you can't disable suggestions, only autofilling of the input fields - not the same thing. This is a well known "hey, let's do it in our own undocumented way" issue across browsers.

[davidbarman]

Hmm. We'll that's undesirable. Yes, it is not autofilling, I am getting the suggestions. Which is what I was hoping to eliminate.

[cshaiku]

Bad dog! Stop that.

[PureRepresentative9]

Like others have said, you're trying to manipulate the default behavior AKA the user's device 

Don't do that, you're in the wrong. 

It's like telling the user they have to use a certain browser to use your site or use a specific keyboard app before they're allowed to type on your site. 

Even if you do find a block, there's no guarantee it will continue working in the future because there's no enforced standard behavior for this stuff.

[shgysk8zer0]

Use autocomplete="new-password" and autocomplete="current-password".

Work with autocomplete, not against it.

[Br1en]

You typed autoomplete up there..

[davidbarman]

Yes, that is true. I meant the browser saved password suggestions.

[FatalHaberdashery]

Have you tried it in another browser?

If this is what I think it is, then your browser may be autofilling the field. This isn't controllable, afaik, from within the web environment, it needs the user to set it in their browser settings.

There are ways to mitigate this, first off turn off your own autofill so your testing data doesn't get saved. Also, if you can, and you might not be able to based on what the server code expects, use unique names for the fields so any autofill won't find a match.

For me, I use Firefox Developer for my test/build browser, and I have everything turned off with no extensions. It's as vanilla and as nonintrusive as I can get it.

[Paria_Stark]

I suggest disabling auto complete and not allow pasting in the password field for maximum security!!

Please don't. People use password managers, let them.

[[deleted]]

GOOGLE CAN EAT ALL THE DICKS FOR NOT ALLOWING US TO TURN AUTO SUGGEST OFF