Browser autofill is convenient, but it can be a privacy risk if you let it fill in more than you intend. Security researchers have shown that a scammer can hide extra form fields on a webpage, and when the browser fills in the visible fields it may fill the hidden ones too, quietly handing over saved details such as your address, phone number and card information. Turning autofill off for sensitive data is a simple way to shut that door.
What does autofill actually store?
Most browsers can save several kinds of information to fill in forms for you:
- names, addresses, phone numbers and email addresses
- payment cards and expiration dates
- usernames and passwords
Anyone who gets into your browser profile, or a website that tricks the browser into filling the wrong fields, can potentially reach what’s stored. The more you save, the more there is to lose.
Should you turn autofill off?
For payment cards and other sensitive details, we recommend turning it off, or choosing a setting that only fills a form when you click on a field yourself. You give up a few seconds of typing in exchange for keeping your personal and payment details out of the wrong hands.
Addresses and logins are a judgment call. If you keep them, protect your device with a strong lock screen password, and keep your browser up to date, since fixes for this kind of trick arrive through updates.
How to turn autofill off
Menu names change between browser versions, so if you don’t see these exact labels, look for “Autofill” or “Passwords” in settings.
Chrome
- Open Chrome’s Settings.
- Find the Autofill section (it may be called Autofill and passwords).
- Turn off the options for saved addresses and payment methods.
Safari
- Go to Safari > Settings (older versions call it Preferences).
- Open the AutoFill tab and uncheck the types of information you don’t want filled.
Other browsers. Edge and Firefox have similar autofill and payment sections in their settings.
Don’t forget your phone. Autofill settings on iPhone, iPad and Android phones are separate from your computer, so check them there too.
Use a password manager for logins
Browsers that save passwords make them easy to pull out for anyone with access to your device. A dedicated password manager keeps them behind an encrypted vault and a strong master password, and it only fills in a login on the site it belongs to. Our guide to staying safe online covers browsers, antivirus and passwords together.
Need a hand?
If you’d like help changing these settings, stop in at our Dayton shop and bring your device to the counter. If you think your computer has already picked up something nasty, our virus removal service can clean it up.