How “autofill” can steal your personal information. This vulnerability has been around for over 8 years. Stay safe!

I posted the proof of concept on GitHub if anyone wants to check it out!

@1Password do you do anything to protect us from this?

Hi Dave, the team would like to look into this further - if you send an email in to [email protected] and include a link to your post, someone will be in touch!

Wow. Good tip Ryan. Thanks.

Well I use autofill becauseall my passwords are generated and over 60 characters, so I don't know what to do now

Oh Jesus. I didn’t know that. Thanks for letting us know!

@DeyOClub Thank you Ryan. You are always looking out for us. 💜🎶

If the password manager doesn’t autofill hidden fields, could you do the same thing by just positioning the inputs off screen, or covered by another element?

WHAT THE HECK? I Never Even Thought This Way. I Need To Make Some Serious Changes. @Bitwarden and @Proton_Pass, Do You Have Any Security Implication Against This? Solution Could Be: While Autofilling Creds, Password Manager Can Warn User That Website Contains Hidden Fields.

Thank you for sharing! 😎👍