Web pages Remember passwords have security issues-how to handle them

Now general security sites do not remember the password function, because remember the password has a security flaw.

Regardless of the network interception problem, if the login page remember the password, the second login, directly into the developer mode to change the type of text to see the password.

Processing method:

1, the autocomplete= "off" attribute is added.

2, the page uses the HTTPS protocol, because HTTPS is not to save the form information.

3, to a perverted good, that is, you can change the type= "password" to type= "text", because the type is not password will not appear to remember the password function, and then set a variable such as: Var val= "" or set a hidden field <input Type= "hidden" Name= "Val", finally with the onpropertychange to change the password to a line of dots, and assign the value to Val, and then return the value of Val back, due to the same effect as the * number. The user is not visible.

Web pages Remember passwords have security issues-how to handle them