Set acceptable domains for generated passwords - google-chrome

Since some time ago, browsers will allow users to generate a secure password for the application, they are using.
This seems like a nice feature, but can have unwanted side effects, like the users cannot know his password, if prompted on another domain.
Is there a way to control, for which pages the generated password might be suitable?
Is there a way to tell the browser, that he's seeing a password reset or change for a specific domain?
Essentially, I'd like to allow the browser to autofill at login.contoso.com, when I originally set the password at account.contoso.com.

AFAIK in Edge/Chrome, if you want to autofill the password for a specific domain, you can "Add password" in password manager.
Edge: Settings --> Passwords --> Add password
Chrome: Settings --> Autofill --> Add
Also, if you have saved password in a subdomain like account.contoso.com, you will have an "autofill" dropdown menu (click the box to call) in another subdomain like login.contoso.com. Though it is not the exact "autofill".

Related

Chrome suggest password in login page

I have a web app that when I open it in chrome on my cellphone, it suggests generating password in the login page, like this.
The question is, how can I add some semantics to my html field that chrome just suggests strong password generation in registration page and not in login page.
See the autocomplete attribute.
Set it to current-password or new-password as applicable.

Firefox's password manager confuses site-wide login with any login fields inside the site

Let's say you have a site for saving your pets' credentials: you log in, then you can see your puppy's username/password and your kitten's username/password.
But in Firefox, if you choose to save your own logins just to get into the site, it will then auto-fill puppy's form and kitten's form with your credentials.
Chrome seems to behave correctly and Safari gives you the option (without automatically populating puppy/kitten's forms).
Is there something I can set on the forms so that browsers can differentiate them from the main site's login form?

Firefox Password Field is not empty

I'm new here on stackoverflow.
I'm writing a Form to add a Album to a gallery, but now I discovered a problem in Firefox which I've never had. The password field is already set. I never filled out the form.
Does somebody knows, why Firefox fills text in?
If it is a saved password, you will be able to find it in the security and password settings (see link for more information). If you've saved a password on a different portion of the site (say you have a form on www.site.com/login.html and www.site.com/admin.html for example), it could be pulling it from there.

Bring new email client window to front when clicking on mailto hyperlink from webpage

Is there a way to bring the new email window (outlook or default email client) to focus when clicking a mailto hyperlink from a webpage within a browser?
Web Master
Thank you in advance.
Not explicitly, since that's up to the operating system and (in some cases) user-configured preferences. FWIW, the default behavior of most operating system / browser configurations does exactly what you want. So, if it doesn't work that way for a particular user, that's most likely because the user has specifically configured his or her system otherwise.

Why do browsers use my saved password for all forms in the one site?

Is there a way to limit the url of saved credentials in browsers?
For example, if I save a username and password for http://www.website.com/login can I make it so that the rest of the forms in the site don't use these details? http://www.website.com/members, http://www.website.com/admin etc...
I'm aware of the autocomplete attribute but I don't want to turn off autocomplete entirely. I would like it if the browser remembered the login details per form or url.
Nope, browsers simply remember details for a base domain (or subdomain). You can't set it to remember credentials for only specific pages. (Note that domain.com and www.domain.com are considered different domains).