Demo - Login manager autofill abuse

This demo checks whether your browser's built-in login manager will automatically fill an invisible login form.

We found tracking companies using the login managers built-in to browsers to sniff email addresses without any visual indication to the user. Check out our blog post for more information.

To start, we'll need you to save some test credentials using the form below. On a later page, we'll demonstrate how a third-party script can retrieve these saved credentials. Note that the third party does not need to be present when the credenitals are saved, and that none are present on this page.

Demo steps

  1. Submit the following form with fake credentials
  2. Your browser will ask whether you want to save this login. Click "Save".
Please do not enter a real email address.
Please do not enter a real password.