autocomplete='off' and fields still autopopulate

By design Issue #9847360

Details

Created
Nov 17, 2016
Privacy
This issue is public.
Found in
  • Microsoft Edge
Reports
Reported by 1 person

Sign in to watch or report this issue.

Steps to reproduce

  1. Login to a site and save your username/password.
  2. After login, the user is able to goto a form to add another user to the db. It’s got many fields including a password and email field for the new user.
  3. Anytime this form is accessed by Edge, the password and email fields get autofilled by the creds that I saved when logging into the site.
  4. I’ve tried the following, but nothing stops Edge from autofilling password and email fields.
<form class='form-horizontal' autocomplete='off'>
<input type='password' autocomplete='off'>

Below example seems to work for FF, Chrome and Safari.

<input type='password' autocomplete='new-password'>

Attachments

0 attachments

    Comments and activity

    • Microsoft Edge Team

      Changed Assigned To to “Ibrahim O.”

    • Thank you for your feedback. Could you please provide us a sample or URL that can demonstrate the issue along with your build version (winver.exe)

      Best regards,
      The MS Edge Team

    • Hi Ibrahim,
      Unfortunately I cannot share the application since it is an internal product for the company I work for. I tried creating a fiddler for you but am in need of a back end to log into. You should be able to repro this issue by logging into any site and when the password manager is invoked, save your credentials. Then, any form you try to fill out after your credentials are saved, will be prepopulated with your info if they possess . It’s easiest to recreate when logging into an admin panel, a provisioning application or maybe even a signup form.

    • Here is the versioning info you requested.

      Edition: Windows 10 pro
      Version: 1607
      OS Build: 14393.447

      Microsoft Edge 38.14393.0.0
      Microsoft EdgeHTML 14.14393

    • Thank you for the update. I see the issue now, we will look into that. 

      All the best,
      The MS Edge Team

    • Microsoft Edge Team

      Changed Assigned To to “Dave B.”

      Changed Assigned To from “Dave B.” to “David S.”

      Changed Assigned To from “David S.” to “Yan Z.”

      Changed Assigned To from “Yan Z.” to “Sean L.”

      Changed Status to “By design”

    • In IE11 and Edge, we made the decision to ignore autocomplete=off, reasoning the user agent was allowed to ignore this to provide increased user value. We will go ahead and close this bug as "By design", thanks again for your feedback and w
      e continue to welcome more feedback and look forward to hearing from you again soon.

      Best regards,

      The MS Edge Team

    You need to sign in to your Microsoft account to add a comment.

    Sign in