Website provides their info via page or http header metadata

[weitzman]

Would it be helpful to come up with a standard so that websites could declare their password url, password policy, etc. in their page metadata? I know adoption would be slow but would start helping end user experience pretty quickly once password managers start using it.

[igor-makarov]

There are:

Password change:
https://wicg.github.io/change-password-url/
Password rules:
https://www.w3schools.com/tags/att_input_pattern.asp

The reason for this whole repo is that websites like banks and such can't be bothered to comply with standards.

[rmondello]

@igor-makarov The pattern attribute that you cite is interesting, but limited, which is why Apple devised a different approach: https://developer.apple.com/documentation/security/password_autofill/customizing_password_autofill_rules?language=objc

[igor-makarov]

@rmondello are there plans to standardize it?

[diktomat]

I think the greater goal is for websites to adhere to standards (well known password change url) and not have any password restrictions at all. This isn’t helped by having a standard how to present these unwanted rules.

[hober]

@rmondello are there plans to standardize it?

https://github.com/whatwg/html/pull/4000