autocomplete='off' and fields still autopopulate

By design Issue #9847360


Nov 17, 2016
This issue is public.
Found in
  • Microsoft Edge
Reported by 6 people

Sign in to watch or report this issue.

Steps to reproduce

  1. Login to a site and save your username/password.
  2. After login, the user is able to goto a form to add another user to the db. It’s got many fields including a password and email field for the new user.
  3. Anytime this form is accessed by Edge, the password and email fields get autofilled by the creds that I saved when logging into the site.
  4. I’ve tried the following, but nothing stops Edge from autofilling password and email fields.
<form class='form-horizontal' autocomplete='off'>
<input type='password' autocomplete='off'>

Below example seems to work for FF, Chrome and Safari.

<input type='password' autocomplete='new-password'>


0 attachments

    Comments and activity

    • Microsoft Edge Team

      Changed Assigned To to “Ibrahim O.”

    • Thank you for your feedback. Could you please provide us a sample or URL that can demonstrate the issue along with your build version (winver.exe)

      Best regards,
      The MS Edge Team

    • Hi Ibrahim,
      Unfortunately I cannot share the application since it is an internal product for the company I work for. I tried creating a fiddler for you but am in need of a back end to log into. You should be able to repro this issue by logging into any site and when the password manager is invoked, save your credentials. Then, any form you try to fill out after your credentials are saved, will be prepopulated with your info if they possess . It’s easiest to recreate when logging into an admin panel, a provisioning application or maybe even a signup form.

    • Here is the versioning info you requested.

      Edition: Windows 10 pro
      Version: 1607
      OS Build: 14393.447

      Microsoft Edge 38.14393.0.0
      Microsoft EdgeHTML 14.14393

    • Thank you for the update. I see the issue now, we will look into that. 

      All the best,
      The MS Edge Team

    • Microsoft Edge Team

      Changed Assigned To to “Dave B.”

      Changed Assigned To from “Dave B.” to “David S.”

      Changed Assigned To from “David S.” to “Yan Z.”

      Changed Assigned To from “Yan Z.” to “Sean L.”

      Changed Status to “By design”

    • In IE11 and Edge, we made the decision to ignore autocomplete=off, reasoning the user agent was allowed to ignore this to provide increased user value. We will go ahead and close this bug as "By design", thanks again for your feedback and w
      e continue to welcome more feedback and look forward to hearing from you again soon.

      Best regards,

      The MS Edge Team

    • “By Design” doesn’t mean that the functionality is correct. I’m struggling with a complex web form that is auto-populating the wrong values into some text fields in Edge browser, and now I have to code some sort of “special” fix for Edge. C’mon guys why not just design it properly and behave like other browsers instead of making us write “special” code for Edge.

    • Well, it actually provides decreased user value when password appears in protected field that has nothing to with password.

    • This is just one more reason to use Chrome. I have a very complex web page with many fields that 99% of the time accept a decimal number. Since it “remembers” what I have typed and I want to type 1 and hit enter it shows the suggestions for anything i have ever entered that has “1” in it (such as 9/1/2016) and then i have to hit enter 2 times (one to ignore/close the suggestions and one more to go to the next field). Works great in Chrome, FireFox, Opera.

    • “we made the decision to ignore autocomplete=off”

      You guys are clearly making bad decisions. Another reason I’m not spending licenses on Windows 10 and Server 2016. You guys really need to concentrate on fixing your products.

    • On my bank’s web site, the field of ID auto completes with the wrong word. When I delete it and fill in the correct ID I get the message that it is wrong and the ID field has repopulated with the wrong word. I do not want to change the password or ID (don’t really know what the ID it thinks is correct since it is partially hidden by asterisks. The bank’s web site works fine in Chrome and Firefox. I now avoid Edge. It’s a shame you ruined it.

    • “In IE11 and Edge, we made the decision to ignore autocomplete=off”
      it sounds terrible!
      As developer of high security-critical application I want to disallow save passwords to users.
      how can I do that?

    • Well, all I can say is that you are further confirming our commitment to have our clients use Chrome, or FF, or any other “standard” browser not originating from Microsoft.

      Ran into this issue vetting our product update for the next release cycle, and this is just one more reason to continue supporting Chrome, so, thanks for at least confirming my position on this!

    • This is a classic design failure. Removing an important feature and refusing to listen to customer feedback is not ‘improvement’

      Too bad, I thought Microsoft might have become a real player in the web browser world, but we in light of this and other failures of Edge we will specify Chrome as the only supported browser for our users.

      Thanks to Ibrahim O. who revealed that the Microsoft Edge Team did this stupid thing on purpose: “By design”

    • I for one wholeheartedly want and expect that my choice concerning the autofill/autocomplete of usernames and passwords by any browser follows precisely and only my preferences. I am miffed to the extreme now that I’ve hit a few sites where edge and IE11 seem to be respecting the autocomplete=off command in code, when my choice is to have autocomplete on all my sites. So what is the registry toggle that will tell my browsers to respect only my wishes and not that of some snooty self-important website?

    • “In IE11 and Edge, we made the decision to ignore autocomplete=off”

      WHAT !!! ???
      That’s why we are receiving so many UI complaints recently. This is a terrible decision Microsoft.

      Please STOP breaking Edge by NOT supporting standard HTML correctly.
      Edge should honor the autocomplete="off" tag.

    You need to sign in to your Microsoft account to add a comment.

    Sign in