• Natanael@slrpnk.net
    link
    fedilink
    arrow-up
    8
    ·
    1 year ago

    Depends on how it’s implemented. IMHO the best ones are password managers external to the browser but with a plugin which detects the domain name. The risk with autofill is stuff like spoofing and malicious iframes, a secure plugin can detect that and refuse to autofill.

    Alternatively, just set it to always ask when it detects a login form.

    • bassomitron@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      1 year ago

      Most browser autofills already work off the domain name? Unless you’re saying there’s plugins that work off of security certs instead?