• Natanael
    link
    fedilink
    arrow-up
    9
    ·
    10 months ago

    Depends on how it’s implemented. IMHO the best ones are password managers external to the browser but with a plugin which detects the domain name. The risk with autofill is stuff like spoofing and malicious iframes, a secure plugin can detect that and refuse to autofill.

    Alternatively, just set it to always ask when it detects a login form.

    • bassomitron@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      10 months ago

      Most browser autofills already work off the domain name? Unless you’re saying there’s plugins that work off of security certs instead?