How to Prevent Password Autocompletion in Confluence
The following browsers have removed support for the use of autocomplete="off"
- Apple Safari 6.1.6 (OS X 10.7)
- Google Chrome 41+
- Microsoft Edge
- Microsoft Internet Explorer 11+
- Mozilla Firefox 30+
As this is a design choice made by the browser's authors, there is no current work around available.
Platform Notice: Server and Data Center Only - This article only applies to Atlassian products on the server and data center platforms.
Some organizations have security requirements that require the AutoComplete attribute to be set to "off" for Usernames and Passwords in form based authentication. Confluence does not prevent autocompletion by default, and you will need to alter the login form in order to alter this behavior.
With a few modifications, the autocomplete=off attribute can be set for both the username and password fields. You will need to alter the page for the user login form in order to accomplish setting the autocomplete to off.
Find the line
<input type="password" name="$!webwork.htmlEncode($parameters.name)" id="$!webwork.htmlEncode($parameters.id)" ##
And modify it to
<input type="password" autocomplete="off" name="$!webwork.htmlEncode($parameters.name)" id="$!webwork.htmlEncode($parameters.id)" ##
- Save the file, shut down and restart Confluence
- Test your changes
This solution was tested in Confluence 5.x and 6.x. Future versions may change the files and form.