Detections
Analytics

2.25 (L2) Ensure 'Enable AutoFill for addresses' is set to 'Disabled'

Information

Chrome allows users to auto-complete web forms with saved information such as address or phone number. Disabling this feature will prompt a user to enter all information manually.

The recommended state for this setting is: Disabled (0)

If an attacker gains access to a user's machine where the user has stored address AutoFill data, information could be harvested.

Solution

To establish the recommended configuration via Group Policy, set the following UI path to Disabled :

Computer Configuration\Policies\Administrative Templates\Google\Google Chrome\Enable AutoFill for addresses

Impact:

If this setting is disabled, AutoFill will be inaccessible to users.

See Also

https://workbench.cisecurity.org/benchmarks/23110

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-8, CSCv7|4.8

Plugin: Windows

Control ID: 429219341474ad66116e0e7adda7ca114abb622b696ea3e2473063a80613b667