javascript - Prevent Browsers not to remember password - Stack Overflow

admin管理员组

文章数量:1352208

We have an application with a login screen which has input field text and password. What I am trying to achive here is;

1. Prevent browsers to ask if, user wants it to be memorized by browser.
2. Prevent all browsers not to memorize that field at any situation. Even if you said "yes", I want all the browsers ignore that field entirely.

The things I tried;

1. I tried to use autoplete="off" on both form and inputs but with the new Firefox version, it doesn't seem to work.
2. I inserted an non-displayed input password field to trick the browser. But it is bad for accessibility. It also lowers the usability score.
3. I tried to make autoplete="new-password" but internet explorer pletely ignores it.. (like I am surprised)

So if anyone achieved a good result with any other solutions, and if it could be shared, it would be a great contribution to developer munity.

We have an application with a login screen which has input field text and password. What I am trying to achive here is;

1. Prevent browsers to ask if, user wants it to be memorized by browser.
2. Prevent all browsers not to memorize that field at any situation. Even if you said "yes", I want all the browsers ignore that field entirely.

The things I tried;

1. I tried to use autoplete="off" on both form and inputs but with the new Firefox version, it doesn't seem to work.
2. I inserted an non-displayed input password field to trick the browser. But it is bad for accessibility. It also lowers the usability score.
3. I tried to make autoplete="new-password" but internet explorer pletely ignores it.. (like I am surprised)

So if anyone achieved a good result with any other solutions, and if it could be shared, it would be a great contribution to developer munity.

• javascript
• html
• forms
• authentication
• form-fields

Share Improve this question Follow asked Feb 24, 2020 at 6:21 Demeter DimitriDemeter Dimitri 61888 silver badges1717 bronze badges 8

• 1 You can probably make the field not look like a password field to browsers, so that message doesn't show on default browsers, but if someone really wants to save it, you can't prevent it. – ASDFGerte Commented Feb 24, 2020 at 6:24
• What's the HTML? You could try removing attributes from the input. Could also try removing the form, but that makes it less accessible IIRC – CertainPerformance Commented Feb 24, 2020 at 6:32
• Yes, it makes it less accessible. I want to keep on using the password input field with type attribute password. Otherwise it causes other issues :( – Demeter Dimitri Commented Feb 24, 2020 at 6:36
• Does this answer your question? How to disable Chrome's saved password prompt setting through JavaScript – F.NiX Commented Feb 24, 2020 at 8:26
• 2 Why is this even your goal? Are you trying to force users to type in their password every time? If so, that's a great way to get them stored in plaintext. If you do want to do this, however, you should be able to emulate a password input box by captuing keyboard event listeners. – ecc521 Commented Jun 26, 2020 at 21:38

 |  Show 3 more ments

4 Answers 4

Sorted by: Reset to default 6 +25

This cannot be prevented from scripts, the only way to prevent is you can disable Autofill in Browser Settings.

You cannot do this while using an input field for passwords. I also strongly advise against you using a regular input field, because many browsers save inputs to those too (but in plain text).

Using a text box inside a canvas is not good for accessibility, and it also is pletely inpatible with older browsers.

Your best bet is going to be creating a hidden div that you can type in via contenteditable, and then creating a fake password entry overlay that adds a • every time you type a character. This has the exact same level of treatment from the browser as a regular password input, but the browser won't prompt you to save it.

You should put text input box inside a canvas.
Take a look at CanvasInput and canvas-text-editor.

By using canvas to draw input box you can trick browsers.

or you can use contenteditable on a div.

This is Tricky

The reason is browser always watch input field type when we submit.

example

<input type="password">

when use div tag browser does not show (save popup)

example(you want to write some huge logic to hide password)

<div contenteditable="true">username</div>
<div contenteditable="true">password</div>

otherwise you want to manually disable autofilling and popup in your browser

本文标签： javascriptPrevent Browsers not to remember passwordStack Overflow