What is AutoComplete?

AutoComplete is a feature of certian web browsers that will store information that a user types into web page forms on the computer's hard drive. When you begin filling in another form, the browser then suggests possible answers as you are typing. The goal of AutoComplete is to save the user time when filling in forms by suggesting answers that have been used in the past. When the user starts typing in their answer a selection list will appear below the form field of matching answers that have been used in the past. The user can then choose the correct answer instead of typing the whole word.

What are the security risks of using AutoComplete?

If a form is filled out on a public computer (e.g., in a public library or in a computer lab at a college or university), and AutoComplete is activated on that computer, then the information that the user inputs on the form may be suggested as an answer to the next user of the public computer.

Most web browsers have the ability to turn off the AutoComplete feature for all users of the computer. Most people who host a public computer have the foresight to turn this feature off. However, due to oversight, a lack of understanding or limited resources, the provider of a public computer may leave the autocomplete feature enabled on their public computers. This may put your personal information at risk.

What is ECSI doing to reduce the security risks?

ECSI has put an AutoComplete checkbox on certain forms on our web site. This checkbox will turn the AutoComplete feature of the web browser on or off. If you are filling out the form on a public computer, you can click this checkbox to turn the AutoComplete feature off. You will need to turn the feature off before you start filling in the form so that the browser does not capture any of your information.

While it is possible for us to turn the feature off without asking the user, we have left the choice up to the user. Many users appreciate the time and typing that the AutoComplete feature saves them when using their own, personal computers.

Caution: Be aware that having this feature on ECSI's pages will not protect your information on any other site. Using a public computer is much like using a cell phone. Most people would not provide their banking or credit card information over a cell phone in a public place, crowded with strangers. Neither should you provide your information on a public computer where the security of that computer is in question.

If you are using a public computer and question the security policies in place, contact the provider of the computer for full disclosure.

For more information on how to turn the AutoComplete feature off in Internet Explorer, please visit Microsoft's Knowledge Base.