4 ms·
Here's the tricky thing and I don't have a solution that doesn't get abused. I hate that lots of bank do this but I also have a use case for password autocomple
by tmd83 7y ago
Here's the tricky thing and I don't have a solution that doesn't get abused. I hate that lots of bank do this but I also have a use case for password autocomplete=off. We operate in an industry where shared computer access is very common and the risk of users saving password in browser is real and too high.
As I said don't know what the answer is. I definitely want someone using password manager be able to use them. Using a password manager is a conscious choice with setups involved. Browser's default autocomplete is often not. I don't know how to separate these two out.
- epochwolf 7y agoIsn’t it on the people administering those systems to disable autofill on their side?
- tmd83 7y agoIn theory it is. But for most customers (who are small) there's almost no IT department and the average computer literacy is lower than you might think (though improving) so the risk is there. Except for that situation I would happily leave them autofill/save password.
- al2o3cr 7y agoYou could, I dunno, use the tools specifically provided to disable saving passwords in environments where that's undesirable: https://thycotic.com/company/blog/2013/09/09/securing-web-browsers-through-group-policy/ https://thycotic.com/company/blog/2013/09/09/securing-web-br...
- pas 7y agokiosk mode? Firefox has a great extension for this.