This is arguably the safest method as it does not copy the information to your clipboard, no key strokes are logged, and it isn't susceptible to the autofill attack talked about previously. 'Manual' autofill - You click on the username or password box, right click, then go down in your context menu to tell it to fill in your login credentials (protip, the shortcut for this is ctrl + shift + L). It's why 1Password has completely disabled this kind of automatic autofill in their program, and most likely why Bitwarden still warns you that this is a 'beta' feature. From my tests Bitwarden is not susceptible to this for the most part, but I can't make that an absolute statement. This is generally safe, though there is a certain attack that involves adding hidden text boxes into a website that you can't see but end up tricking your password manager into giving that site your login information.

There are ultimately 3 ways to have bitwarden fill in your password:Įnable full autofill - When a page loads up, it immediately fills your username and password into the relevant boxes so you can continue logging into that website without missing a beat. This is a great question! I don't want to speak for the developers, but I believe the issue comes down to the potential of a form filling exploit.

Bitwarden autofill chrome