Saving and auto-filing of username/password is a feature of most modern browsers. And the user can generally choose to disable this feature on a per domain basis. But is there a standard way for the site itself to prevent password caching?
The emphasis here is cross-browser, so I would employ multiple parallel mechanisms if necessary.
(I have seen caching be effectively disabled in the presence of non-standard login fields, eg, an extra hidden password field. But I’d rather not depend on side-effects whose behavior could unexpectedly change in the future.)
Conversely, are there browsers/versions out there that implement password caching without any disable feature?
Add
autocomplete='off'to your<input>elements. Works in all modern browsers, IIRC.