# How do I restrict the browsers from remebering the password?

saikrishnap
0

I would like to restrict the browsers from asking to remember the password for the application. I have done the below changes in the login page

<zk xmlns:h="http/www.w3.org/1999/xhtml" xmlns:ca="client/attribute">
<h:form action="j_spring_security_check" method="post">
</h:form>
</zk>


This works fine in Firefox and IE8 but not working in Chrome.

I tried to specify the ca:autocomplete="off" for form element but didn't worked.

delete retag edit

## 7 Replies

1

this is working fine with IE8 but not with mozilla and crome

can i find any zscrpt to do the same with mozilla and crome also

blarouche
1

Hi,

This doesn't work with IE11, Chrome and Mozilla. What is the way to restrict the browsers from asking to remember the password? Thanks

Alam
1 1

Just use the textbox like this.It will eliminate the browser save password functionality. <textbox id="pwdtb" width="300px" type="password" xmlns:w="client" readonly="true"> <attribute w:name="onBlur"> <attribute w:name="onFocus"> </textbox>

jins
1 1

Darksu
1991 1 4

Hello jins,

Basically when the new form is initiated you can clear the values of the textboxes.

Best,

Darksu

jins
1 1

Hello Darksu

        This is not working in chrome browser


cor3000
4406 2 7

In case you need some commonly accepted opinions check the OWASP website:

Which states:

Since early 2014 most major browsers will override any use of autocomplete="off" with regards to password forms and as a result previous checks for this are not required and recommendations should NOT commonly be given for disabling this feature.

Maybe that's some reasoning for your customer to consider. Also it might be time to upgrade their browsers... I'd argue IE8 (on WinXP?) is the greater security risk here to worry about.

Robert

[hide preview]

## Stats

Seen: 47 times

Last updated: Jun 13 '17

## Related questions

Support Options
• Email Support
• Training
• Consulting
• Outsourcing