搜尋 Mozilla 技術支援網站

防止技術支援詐騙。我們絕對不會要求您撥打電話或發送簡訊,或是提供個人資訊。請用「回報濫用」功能回報可疑的行為。

了解更多

Firefox on windows 8.1 is autofilling a password field when autocomplete is off.

  • 5 回覆
  • 24 有這個問題
  • 18 次檢視
  • 最近回覆由 cor-el

more options

Hi there.

Firefox (Latest version) for windows is autofilling a password field, even with autocomplete turned off.

The HTML for the fields are as follows:

<input name="member_password1" autocomplete="off" type="password">
<input name="member_password2" autocomplete="off" type="password">
Leave password blank to autogenerate a password

In all other browsers this works fine, and the saved password is not added, but Firefox on Windows 8.1 this is being filled in automatically, with the users saved password.

Hi there. Firefox (Latest version) for windows is autofilling a password field, even with autocomplete turned off. The HTML for the fields are as follows: <input name="member_password1" autocomplete="off" type="password"> <br> <input name="member_password2" autocomplete="off" type="password"> <br> Leave password blank to autogenerate a password In all other browsers this works fine, and the saved password is not added, but Firefox on Windows 8.1 this is being filled in automatically, with the users saved password.

被選擇的解決方法

Thanks - I'll see what I can find. Almost a shame that Mozilla simply ignores these fields though.

Such is life!

從原來的回覆中察看解決方案 👍 0

所有回覆 (5)

more options

Yes, this is a change in Firefox 38. If the user has enabled the password manager, then Firefox will ignore autocomplete="off" when it finds a login form.

https://www.mozilla.org/firefox/38.0/releasenotes/

I'm not sure of the exact nature of your concern. For example, a user posted about how this is a problem for users who need to administer user credentials for others, since their own login gets filled (https://support.mozilla.org/questions/1063227). Unfortunately, the only workaround I know of is to delete the login so it can't be filled on any form on the relevant site.

more options

How then, should the fields be set up to force firefox to not autofill those fields?

I've since noticed that it is happening on Mac (I just had two usernames/passwords for the same site saved)

Case scenario: Add new user page with a field for Username and Password box. The Password box is then being auto-populated by the users saved passwords.

According to what you've said, the only way to stop this would be to completely turn off "Remember Passwords for Sites" option, unless there's some other HTML way that we can tell firefox that this field SHOULD NOT be getting auto-filled.

more options

Stewart-Elvanto said

Case scenario:
Add new user page with a field for Username and Password box. The Password box is then being auto-populated by the users saved passwords.

According to what you've said, the only way to stop this would be to completely turn off "Remember Passwords for Sites" option, unless there's some other HTML way that we can tell firefox that this field SHOULD NOT be getting auto-filled.

No, you could keep the feature on but delete the saved password(s) for that site and not save any more for the site going forward.

I don't use this feature myself, but I have read that if you save two logins for the same site, Firefox shouldn't autofill the fields, but instead display available usernames in a drop-down when clicking in the username field. Not sure this will work, but if saving two fictitious logins will block the feature that might be a convenient workaround.

Regarding HTML changes, the new Google login form which asks for the username on a separate screen from the password has been successful in blocking the password manager from automatically logging users in. I haven't studied the mechanics of the form, but scripting definitely is used.

more options

選擇的解決方法

Thanks - I'll see what I can find. Almost a shame that Mozilla simply ignores these fields though.

Such is life!

more options

You can toggle signon.autofillForms to false to prevent Firefox from entering the name and password automatically.

You can open the about:config page via the location/address bar. You can accept the warning and click "I'll be careful" to continue.