Chrome Version: 57.0.2950.4/dev
OS: MacOS

USAA is a pretty large bank and insurance company in the US. They have a login process where you enter your username and password, then on the next page you enter a 4 digit pin. Autofill detects this pin field as a password field and fills in the password you just typed.

The following steps require a USAA account. If someone wants my login details to test, just shoot me an email.

What steps will reproduce the problem?
(1) Go to https://usaa.com, click "Log On".
(2) Type username and password, press enter.
(3) On the next page, you will be asked for the account pin. Autofill automatically puts your password in this field.

What is the expected result?
The pin field should not be autofilled with your password. It would be ideal if your pin was autofilled too.

It's clear why this is happening: the input box is of type "password". Could we adjust our heuristics to prevent this? For example, detecting that the field's id is "pinTextField" or that the pattern is "[0-9*]" with a max length of 4?
 

Deleted: usaapinentry.png 240 KB

	usaapinentry.png 240 KB View Download