# Browser password manager on password-reset page not saving correct site location **URL:** \ **Category:** Bug\ **Created:** [2015年三月23日 18:41 UTC](https://meta.discourse.org/t/browser-password-manager-on-password-reset-page-not-saving-correct-site-location/26678 "2015-03-23T18:41:20Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![watchmanmonitor](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/watchmanmonitor/32/430970_2.png) [@watchmanmonitor](https://meta.discourse.org/u/watchmanmonitor)\ **Post date:** [2015年三月19日 03:19 UTC](https://meta.discourse.org/t/browser-password-manager-on-password-reset-page-not-saving-correct-site-location/26678/1 "2015-03-19T03:19:50Z")
The issue I’m seeing may need to be moved to a new topic. Repro: 1. Get invited to a discourse. 2. Accept by clicking a link. 3. receive email saying “set your password” 4. click the link and set a password. 5. browsers will offer to save the password, but the email isn’t anywhere, making the resulting saved credential an orphan, unable to get used. ---
**Author:** ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)\ **Post date:** [2015年三月19日 08:02 UTC](https://meta.discourse.org/t/browser-password-manager-on-password-reset-page-not-saving-correct-site-location/26678/2 "2015-03-19T08:02:51Z")
Yes that is a completely different issue. I am not sure the invite flow can be captured by any known password manager. I wonder if putting the email on the page as a form field, but read-only, would work? @techapj can you put on your list a quick hack to test this theory? ---
**Author:** ![techAPJ](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/techapj/32/342990_2.png) [@techAPJ](https://meta.discourse.org/u/techAPJ)\ **Post date:** [2015年三月23日 18:46 UTC](https://meta.discourse.org/t/browser-password-manager-on-password-reset-page-not-saving-correct-site-location/26678/3 "2015-03-23T18:46:43Z")
Okay, I am able to repro this. The issue is that password manager is saving site location as `http://forum.example.com/users/password-reset`, so the credential is not getting used on `http://forum.example.com`. We somehow need to tell password manager to save site location as `http://forum.example.com`. This may be tricky. Added on my list. ---
**Author:** ![watchmanmonitor](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/watchmanmonitor/32/430970_2.png) [@watchmanmonitor](https://meta.discourse.org/u/watchmanmonitor)\ **Post date:** [2015年三月24日 03:40 UTC](https://meta.discourse.org/t/browser-password-manager-on-password-reset-page-not-saving-correct-site-location/26678/4 "2015-03-24T03:40:49Z")
My password managers don’t care much about the full URL, only the domain.tld What happens a lot is that the password is saved without an email, preventing it from being used (or preventing Keychain on a mac from saving anything at all) ---
**Author:** ![techAPJ](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/techapj/32/342990_2.png) [@techAPJ](https://meta.discourse.org/u/techAPJ)\ **Post date:** [2015年三月24日 04:20 UTC](https://meta.discourse.org/t/browser-password-manager-on-password-reset-page-not-saving-correct-site-location/26678/5 "2015-03-24T04:20:37Z")
> [@watchmanmonitor](#): > > the password is saved without an email We are providing username (instead of email) in the form. I just checked and Chrome default password manager is saving the username password combination. ---
**Author:** ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)\ **Post date:** [2015年六月27日 22:15 UTC](https://meta.discourse.org/t/browser-password-manager-on-password-reset-page-not-saving-correct-site-location/26678/6 "2015-06-27T22:15:50Z")