Netgate SG-1000 microFirewall

Author Topic: not to offer save usernames/passwords  (Read 268 times)

0 Members and 1 Guest are viewing this topic.

Offline RootMd5

  • Jr. Member
  • **
  • Posts: 47
  • Karma: +0/-0
    • View Profile
not to offer save usernames/passwords
« on: December 22, 2017, 02:54:37 am »
Hey Everyone,

Is it possible to tell the browsers not to offer save usernames/passwords when we login.


Thanks
Manu

Offline johnpoz

  • Hero Member
  • *****
  • Posts: 15753
  • Karma: +1472/-210
  • Not a pfSense employee, they cannot fire me...
    • View Profile
Re: not to offer save usernames/passwords
« Reply #1 on: December 22, 2017, 05:03:53 am »
Pretty sure that is the default... Do you have this checked or not checked? Under System Advanced..

Enable webConfigurator login autocomplete
When this is checked, login credentials for the webConfigurator may be saved by the browser. While convenient, some security standards require this to be disabled. Check this box to enable autocomplete on the login form so that browsers will prompt to save credentials (NOTE: Some browsers do not respect this option).
- An intelligent man is sometimes forced to be drunk to spend time with his fools.
- Please don't PM me for personal help
- if you want to say thanks applaud or https://www.freebsdfoundation.org/donate/
1x SG-2440 2.4.3-RELEASE (work)
1x SG-3100 2.4.3-RELEASE (work)
1x SG-4860 2.4.3-RELEASE (home)

Offline jimp

  • Administrator
  • Hero Member
  • *****
  • Posts: 21747
  • Karma: +1503/-26
    • View Profile
Re: not to offer save usernames/passwords
« Reply #2 on: December 22, 2017, 08:13:28 am »
Some time ago browsers decided that web developers shouldn't be allowed to tell users they can't save password fields. Even when it's in the best interest of user security.

We set the correct properties, but browsers don't care anymore. If you don't want it to be remembered, disable password autofill in your browser.
Need help fast? Commercial Support!

Co-Author of pfSense: The Definitive Guide. - Check the Doc Wiki for FAQs.

Do not PM for help!

Offline RootMd5

  • Jr. Member
  • **
  • Posts: 47
  • Karma: +0/-0
    • View Profile
Re: not to offer save usernames/passwords
« Reply #3 on: January 09, 2018, 11:19:36 pm »
Some time ago browsers decided that web developers shouldn't be allowed to tell users they can't save password fields. Even when it's in the best interest of user security.

We set the correct properties, but browsers don't care anymore. If you don't want it to be remembered, disable password autofill in your browser.

Thanks For The Clarification Jimp.



Manu

Offline RootMd5

  • Jr. Member
  • **
  • Posts: 47
  • Karma: +0/-0
    • View Profile
Re: not to offer save usernames/passwords
« Reply #4 on: January 09, 2018, 11:22:26 pm »
Pretty sure that is the default... Do you have this checked or not checked? Under System Advanced..

Enable webConfigurator login autocomplete
When this is checked, login credentials for the webConfigurator may be saved by the browser. While convenient, some security standards require this to be disabled. Check this box to enable autocomplete on the login form so that browsers will prompt to save credentials (NOTE: Some browsers do not respect this option).

I  have now checked this settings and disabled autocomplete , chrome is not offering to save password now but Mozilla still does.
Thanks  for your help.
Manu