Use autocomplete=new-password for new password fields

If a password field is for creating or changing a password, describe it with autocomplete="new-password":

<input type="password" autocomplete="new-password">

This tells the browser not to fill the person’s current password into the field. It may also offer to generate a secure one.

Treat autocomplete as a hint rather than an absolute block: password managers and browsers can make their own decisions. For a sign-in form, use autocomplete="current-password" instead.