I have a login form where I need to do the following:
- allow autocomplete, so users who want to log in without input can continue to do so
- determine if autofill was used in the form, so when the user later tries to access parts of the site that require a login without autofill, I suggest the user to log in again (with a different version of the login form, which instead does NOT allow autofill) if they used autocomplete in first form
Currently, I have not found a way to reliably determine whether autofill was used (IE, Firefox, Chrome, Google toolbar, etc.), any mechanism by which form fields are filled without user input will be considered here as "autofill" ) So now I just allow users to log in for the first time without autocompletion (since then this is an important business requirement), and then forces them to log in with the autocomplete form disabled when they get to the sensitive part of the site, even if they actually typed their username and password in the first form.
If someone found a reliable way to detect (not block) all forms of autocompletion, I would like to hear about it.
Thank!