Keep autofill out of secret fields.
Browsers can mistake unrelated fields for a login, even far apart or off screen. Autofilled credentials can go unnoticed. Submitting those changes can break production integrations. Repeated password suggestions obscure controls and interrupt editing.
Login passwords need native password inputs. Limitations
import { createSecretInput } from 'secret-input';
const field = createSecretInput(element, {
value: 'sk_test_123',
});
element.value; // '•••••••••••'
field.value; // 'sk_test_123'
npm install secret-input
Save a test login
Use dummy credentials and accept your browser’s save prompt.
Disable password-manager extensions.
This page never sends or saves credentials.