Stop users using the autocomplete features of browsers to remember their passwords.
Recently we realised that a number of our users were using the autocompletion/pasting of browser software to pre-fill in their passwords.
While pondering how to combat this i came across a feature of the <input> tag i never noticed before.
This is autocomplete="off" ... And this stops the filling in of stored usernames/passwords, nevermind if they set the browser to remember them.
<input type="text" name="username" value="" autocomplete="off">
<input type="password" name="userpass" value="" autocomplete="off">