Disallow Browsers to Remember Passwords on the Forms Login Screen

March 6, 2015 | KB: 1013606
Forms 9.2.1

Summary

By default, autocomplete is turned on for passwords on the Forms login screen. If autocomplete is turned on, a browser can asks users "do you want to remember the password for this site?" and then store the user's password for logging in in the future. You can disable this setting by editing the Login.cshtml file.

Note: Modern browsers are increasingly ignoring the autocomplete setting, so turning it off may not prevent the browsers from asking the users for their password.

Resolution

To turn autocomplete off for passwords on the Forms login screen:

  1. Browse to<Installation Path>\Laserfiche\Laserfiche Forms\Forms\Views\Account\LogIn.cshtml.
  2. Using a text editor, open LogIn.cshtml.
  3. Remove the HTML comments from around the div class="hidden" element. I.e., change:

    <!--Enable this to prevent browsers from storing password
    <div class="hidden">
    <input type="password" />
    </div>
    -->

    to

    <div class="hidden">
    <input type="password" />
    </div>

  4. Save your changes.
  5. Restart the World Wide Web Publishing Service.