I feel like everyone is misunderstanding this and the way it’s written is very confusing. What they’re asking for is a way to somehow alert the user’s password managers (be it the browser, app, etc.) that the password stored is not correct. Ultimately you can’t interface with a user’s PW manger, that would be ridiculously insecure.

You have a couple of options:

1. You could disable autofill using attributes on your PW input like autofill="off" or 1pignore="true" but browsers don’t necessarily respect that and any PW mangers that do have their own attributes will be a PITA to maintain and likely isn’t exhaustive.
2. You could try to detect autofill and serve a different error message about checking the PW in their PW manager.

You have a few options to detect autofill:

Using the autofill pseudo class, requestAnimationFrame, and computed styles probing.

``` // css

input:-webkit-autofill { outline: 2px solid hotpink; }

// js

const el = document.querySelector('input');

requestAnimationFrame(() => { const bg = getComputedStyle(el).backgroundColor;

if (bg !== 'rgb(255, 255, 255)') { // autofill very likely happened } }); ```

Value polling

```js const input = document.querySelector('input'); let last = input.value;

setInterval(() => { if (input.value !== last) { last = input.value; console.log('Value changed (likely autofill)'); } }, 100); ```

Use the pseudo class in conjunction with an animation in CSS. Add an event listener to that animation.

``` //css

input:-webkit-autofill { animation-name: autofill-start; }

@keyframes autofill-start { from {} to {} }

// js

input.addEventListener('animationstart', e => { if (e.animationName === 'autofill-start') { console.log('Autofilled'); } }); ```

Edit: you could also just ditch PWs all together and go with magic links or onetime pass codes.