Good. I have never, not once, seen autocomplete=off where it actually made sense, except in the minds of a developer who erroneously thinks it's a good idea to block password managers.
I can imagine legitimate hypothetical use cases for it. I've just never seen a legitimate actual use case.
> In SP 800-63B, NIST has not explicitly recommended the use of password managers, but recommends that verifiers permit the use of “paste” functionality so that the subscriber can use a password manager if desired.
I'll take their word over some rando app developer who doesn't want users to have a working 1Password setup.
I can imagine legitimate hypothetical use cases for it. I've just never seen a legitimate actual use case.
Edit: NIST says (in https://pages.nist.gov/800-63-FAQ/#q-b12):
> In SP 800-63B, NIST has not explicitly recommended the use of password managers, but recommends that verifiers permit the use of “paste” functionality so that the subscriber can use a password manager if desired.
I'll take their word over some rando app developer who doesn't want users to have a working 1Password setup.