Password field auto-complete (instance security hardening)

  • Release version: Washingtondc
  • Updated February 1, 2024
  • 1 minute to read

    • Use the glide.login.autocomplete property to enable browsers to use auto-complete on password fields in login forms.

    More information

    Attribute Description
    Property name glide.login.autocomplete
    Configuration type System Properties (/sys_properties_list.do)
    Configure in Instance Security Center Yes
    Purpose To disable browser to attempt auto-complete for a password field.
    Recommended value false
    Functional ImpactThis remediation causes the Password field autocomplete flag to be turned off such that password history cache by browser is not shown in the field. There shouldn't be any functionality impact.
    Security risk (Low) User authentication fields should be validated and should never let the client-side caching to happen.
    References https://support.servicenow.com/kb_view.do?sysparm_article=KB0563953

    To learn more about adding or creating a system property, see Add a system property.