PassfieldGuard

Blocks password fields unless the URL is defined on a whitelist.

Password Field Blocker is a free enterprise extension which will block password fields in your browser session, unless it is listed on a defined whitelist.txt file. Blocking password fields is helpfull to make sure your end-users are not entering their passwords manually on websites which aren't allowed. This will basically prevent credential leaking in the case of visiting a malicious URL. This whitelist.txt location is defined in the config.json, which should also be published trough GPO, in case it will be used on enterprise level. In the config.json file, there are also some other values which can be modified. Example is located here: https://github.com/securitydotwf/PassfieldGuard/tree/main