Ask HN: Any security issues with using a font for password input? | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		Ask HN: Any security issues with using a font for password input?
		1 point by solumunus on March 15, 2023 \| hide \| past \| favorite \| 2 comments
		I have an app where many users will share 1 PC and log in and out many times per day. In this use case it's imperative that passwords are not saved in the browser. The only way I can seem to totally prevent this is to use an text input and apply a custom font to it where the letters are obfuscated. Am I opening up any security holes by doing this?

dexwiz on March 15, 2023 [–]

You can set autocomplete=none. Password managers should respect that and not save passwords for that field.

solumunus on March 15, 2023 | [–]

Google Chrome completely ignores that.

EDIT: Apparently Chrome will respect the following:

<input name="new-password" id="new-password" autocomplete="new-password" >

I'll try this.

I'd still appreciate an answer to the question if anyone has one.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact