Login form does not disable auto-completion

If making this change would prevents password managers like LastPass from working then I'm -1. I assume it does.

On 28 March 2014 10:48, Gavin Panella <email address hidden> wrote:
> If making this change would prevents password managers like LastPass
> from working then I'm -1. I assume it does.

It doesn't: https://helpdesk.lastpass.com/extension-preferences/advanced/

"Respect AutoComplete=off: Allow websites to disable the Autofill
feature. This option is disabled by default."

So I think this would be safe for us to do it. If people are going to
let other users use their browser-with-signed-in-lastpass then there's
not much we can do to help them :).

My feeling - and I don't know if there's data to validate this - is that use of a password manager, be it LastPass, 1Password, or one built into the browser, leads to better password behaviour: less duplication, and stronger passwords. Disabling auto-completion is an incentive to use a weak or previously-used password.

On 28 March 2014 16:21, Gavin Panella <email address hidden> wrote:
> My feeling - and I don't know if there's data to validate this - is that
> use of a password manager, be it LastPass, 1Password, or one built into
> the browser, leads to better password behaviour: less duplication, and
> stronger passwords. Disabling auto-completion is an incentive to use a
> weak or previously-used password.

I'd agree with your first statement; I'm dubious about the second.
Password strategies are personal; if someone's going to be lazy about
their passwords they're going to be lazy whether or not the browser
autocompletes for them (I know because I did this for years - had one
throwaway password for all the accounts about which I didn't care...
until of course I started caring about them. LastPass cured me of
that).

Anyway, I think we're rapidly heading towards the Dulux aisle at B&Q here.