Skip to content
Setup FoundrySetup Foundry
DESign in

Documentation

Turn on the auto-complete feature for user names and passwords on forms

This user-scoped, ADMX-backed policy controls the Internet Explorer AutoComplete feature for user names and passwords in web forms.

since 0.9.8.11

Purpose

Show registry keys (3)
  • HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FormSuggest Passwords
  • HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FormSuggest PW Ask
  • HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel\FormSuggest Passwords

This user-scoped, ADMX-backed policy controls the Internet Explorer AutoComplete feature for user names and passwords in web forms. The feature can retain credentials entered by the user and suggest them again on subsequent visits.

When the policy is enabled, AutoComplete for user names and passwords is turned on. An associated policy option determines whether Internet Explorer prompts before saving a password. Users cannot change either the AutoComplete setting or the prompt setting.

When the policy is disabled, AutoComplete for user names and passwords is turned off. Internet Explorer also does not offer to save passwords, and users cannot enable either option themselves.

When the policy is not configured, users can control both options.

Notes

Additional effects

The policy locks the corresponding choices in Internet Options. FormSuggest PW Ask represents the selection that determines whether the user is prompted to save passwords.

Security

Allowing AutoComplete together with password saving enables Internet Explorer to retain credentials in the user profile and reuse them in matching forms. This leaves additional sensitive information on the system. Unauthorized use of an unlocked session or compromise of the user profile may therefore also affect saved or automatically supplied credentials.

The policy does not grant additional Windows privileges, bypass access controls, or by itself expose passwords as plaintext.

Disabling the policy prevents further use and storage through this AutoComplete feature. It is not a credential-deletion policy and does not automatically remove passwords that were saved previously.

Possible side effects

When the policy is disabled, users must enter user names and passwords manually in affected web forms. Legacy websites or applications whose workflow depends on Internet Explorer password storage lose that convenience.

Notes

The registry values in the subtitle collectively represent the ADMX policy state and its password-prompt option. Microsoft’s current ADMX mapping identifies HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FormSuggest Passwords as the primary policy value. Individual values or arbitrary combinations of them should therefore not be treated as separate policies with the same verified behavior.

This is an Internet Explorer policy; it does not govern the separate Microsoft Edge password manager. The Internet Explorer 11 desktop application is unsupported or disabled on certain Windows versions. On systems where Internet Explorer remains supported, its lifecycle follows that of the underlying Windows product.

Microsoft documentation

Microsoft Learn: InternetExplorer Policy CSP – AllowAutoComplete

Microsoft Learn: Lifecycle FAQ – Internet Explorer and Microsoft Edge

See also