autocomplete / credentials / local-only
Review autocomplete and sensitive input
Use a fixed form example to separate input-assistance tokens from credentials. Values entered here are not submitted or stored.
Fixed form example
Review the autocomplete purposes locally.
Decision points
| Token | Purpose | Credential boundary |
|---|---|---|
| name / address | Profile or delivery input assistance | Not a credential |
| one-time-code | Single-use verification code | Do not treat as reusable |
| current-password | Current credential | Do not enter a real value in a fixture |