UserAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.87 Safari/537.36

Steps to reproduce the problem:
1. save a password for any sort of user account
2. set up another password type field for say a security question with autocomplete="off"
3.  input auto-fills with saved password regardless

What is the expected behavior?
If i specify no autocomplete i would expect the input to not be filled

What went wrong?
Using password/secret type input for PVQ's autofills with user password despite the autocomplete="off" attribute being set on the input. Also tried using semantic names in place of 'off' and still did not work.

Did this work before? No 

Does this work in other browsers? Yes

Chrome version: 67.0.3396.87  Channel: n/a
OS Version: OS X 10.13.3
Flash Version: Shockwave Flash 30.0 r0