Auto complete for passwords

[Colloden]

I have internet explorer 6 and XP Home, when I type in a user name it auto completes the password field for the JREF forum. This is rather insecure and I’m trying to turn it off, however it does not appear as a setting in Tools/Internet options or anywhere else that I can find.

Anyone know how to disable it ?

[evildave]

Umm... don't use Interner Explorer.

You could try setting "Userdata persistence" to "Disable" in Internet Properties->Security->Custom Level

Of course, all the other settings relating to locally caching username and password entries are potentially insecure. Especially since IE is such a prevalent "standard" that reversing-engineering any of its encryption stuff is worthwhile to any 'c00l H@X0r d00d'.

O' course, letting a UBB forum store your username/password in a cookie is a "gift" to anyone whose website you visit that only asks for it.

[Colloden]

This does not seem to be a cookie issue, I have tried deleting them and logging in again, same effect. clearly the user name / password completion from IE stores them somewhere.

[davidhorman]

Tools->Internet Options->Content->Autocomplete->Clear passwords

David

[Colloden]

Thanks

[shanek]

Another great thing about Mozilla: Passwords and other sensitive information can be encrypted with a Master Password. No one can get at that information unless they know the Master Password.

[!Xx+-Rational-+xX!]

Anecdotal!