Todo #9864


Set autocomplete=new-password for user/password fields in forms

Added by Jim Pingle about 2 years ago. Updated almost 2 years ago.

Web Interface
Target version:
Start date:
Due date:
% Done:


Estimated time:
Plus Target Version:
Release Notes:


It looks like at least Firefox and Chrome current versions suppress autocomplete for usernames and passwords when using autocomplete="new-password" rather than off which all browsers ignore for login fields these days.

Tested on a few pages with success, so it should be more widely implemented.

Actions #1

Updated by Jim Pingle about 2 years ago

  • Status changed from New to Feedback
  • % Done changed from 0 to 100
Actions #2

Updated by Jim Pingle about 2 years ago

  • Target version changed from 2.5.0 to 2.4.5
Actions #3

Updated by Jim Pingle about 2 years ago

  • Status changed from Feedback to Resolved

This appears to be working as intended and it doing a nice job. Pages that were particularly annoying before (like system_advanced_misc.php) no longer attempt to auto-fill. If there are still problems with this in place, there likely isn't much if anything more we can do at this point.

Tested on 2.4.5.a.20191217.0637 (and numerous 2.5.0 snaps up to this point)

Actions #4

Updated by Corey Boyle almost 2 years ago

I have this issue with the OpenVPN Server and Client pages always getting the Proxy username/pass autofilled.

Actions #5

Updated by Jim Pingle almost 2 years ago

On what version? This fix has been applied on 2.4.5 and 2.5.0, and on those versions I do not see the browser attempting to auto-fill proxy or auth data on OpenVPN clients (There is no proxy field on the server).

If you are still on 2.4.4-p3, then it won't be fixed until you upgrade. If you are on 2.4.5 or 2.5.0, then your browser or a browser add-on is not respecting the fields and there isn't anything else to do here.


Also available in: Atom PDF