Deactivate Browser Password Managers Using Device Management

This article will direct you on how to disable various web browser's built-in password managers using group policy. These steps will help prevent corporate logins from being saved and synchronized to personal accounts. You may also consider deploying the Bitwarden browser extension to all browsers as part of this same policy.

Disable with Windows GPO

Öppna Group Policy Management Editor på din hanterande Windows-server.
Ladda ner lämplig Edge Policy-mall.
Skapa ett nytt GPO för Edge i Group Policy Editor och ange ett lämpligt namn.
Välj önskat omfattning.
Högerklicka på det nya grupprincipobjektet → Redigera.
I redigeraren för grupprinciphantering, gå till Användarkonfiguration → Policies → Administrativa mallar → Microsoft Edge.
Ange följande policyer:
- Öppna "Lösenordshanteraren och skydd", inaktivera policyn Aktivera spara lösenord i lösenordshanteraren.
- Inaktivera principen Aktivera autofyll för adresser.
- Inaktivera policyn Aktivera autofyll för betalningsinstrument.
- Alternativt kan du aktivera principen Inaktivera synkronisering av data med hjälp av Microsofts synktjänster.
När det är klart bör GPO-inställningarna visa följande:
Edge Settings
Se till att GPO-länken är aktiverad.

Öppna Group Policy Management Editor på din hanterande Windows-server.
Ladda ner Google Chrome administrativa mallar.
Kopiera följande i ADMX-filen:
policy_templates\windows\admx\chrome.admxandpolicy_templates\windows\admx\google.admxTO C:\Windows\PolicyDefinitions
Kopiera följande i ADML-filen:
policy_templates\windows\admx\en-us\chrome.admlandpolicy_templates\windows\admx\en-us\google.adml
TILL C:\Windows \PolicyDefinitions\en-us
Skapa ett nytt GPO för Chrome i Group Policy Editor och ange ett lämpligt namn.
Välj önskat omfattning.
Högerklicka på grupprincipobjektet → Redigera.
Gå till Användarkonfiguration → Policyer → Administrativa mallar → Google → Google Chrome.
Redigera följande inställningar:
- Inaktivera policyn Aktivera spara lösenord i lösenordshanteraren under "Lösenordshanteraren".
- Inaktivera principen Aktivera autofyll för adresser.
- Inaktivera policyn Aktivera autofyll för kreditkort.
När det är klart bör GPO-inställningarna visa följande:
Chrome Settings
Se till att GPO-länken är aktiverad.

Öppna Group Policy Editor på din hanterande Windows-server.
Ladda ner den senaste .zip-filen för Firefox Policy Templates.
Kopiera ADMX-filen:
FRÅN den nedladdade mappen policy_templates_v1.##\windows\firefox.admx & mozilla.admx
TILL C:\Windows\PolicyDefinitions
Kopiera ADML-filen
FRÅN policy_templates\windows\en-us\firefox.adml & mozilla.adml
TILL C:\Windows \PolicyDefinitions\en-us
Skapa ett nytt GPO för FireFox i Group Policy Editor och ange ett lämpligt namn.
Välj önskat omfattning.
Högerklicka på den nya grupppolicyn → Redigera.
Öppna Användarkonfiguration → Politik → Administrativa mallar → Mozilla → Firefox.
Leta reda på och redigera följande policyer:
- Inaktivera policyn Inaktivera Firefox-konton.
- Inaktivera policyerbjudandet för att spara inloggningar.
- Inaktivera policyn Erbjudande att spara inloggningar (standard).
- Inaktivera policyn Password Manager.
När det är klart bör GPO-inställningarna visa följande:
Firefox Settings
Se till att GPO-länken är aktiverad.

How to check if it worked?

Check that the previous steps worked correctly for your setup:

On a user's computer, Open the command line, and run:
gpupdate /force.
Open Edge, then click the three dots for settings ... → Settings → Passwords.
Ensure "Offer to save passwords" is turned off and managed by the organization.

note

Sign-in automatically is still checked because there is no policy setting to turn this off.

Any logins previously saved in Edge will not be removed and will continue to be displayed to the user, despite autofill being disabled. Be sure to instruct the user to import any saved logins into Bitwarden before deleting them from Edge.

Disable on Linux

To disable the Chrome Password Manager via group policy:

Download the Google Chrome .deb or .rpm for Linux.
Download the Chrome Enterprise Bundle.
Unzip the Enterprise Bundle (GoogleChromeEnterpriseBundle64.zip or GoogleChromeEnterpriseBundle32.zip) and open the /Configuration folder.
Make a copy of the master_preferences.json (in Chrome 91+, initial_preferences.json) and rename it managed_preferences.json.
To disable Chrome's built-in password manager, add the following to managed_preferences.json inside of "policies": { }:
```
Plain Text
{
  "PasswordManagerEnabled": false
}
```

Create the following directories if they do not already exist:

Plain Text
mkdir /etc/opt/chrome/policies
mkdir /etc/opt/chrome/policies/managed

Move managed_preferences.json into /etc/opt/chrome/policies/managed.
As you will need to deploy these files to users' machines, we recommend making sure only admins can write files in the /managed directory.
```
Plain Text
chmod -R 755 /etc/opt/chrome/policies
```
Additionally, we recommend admins should add the following to files to prevent modifications to the files themselves:
```
Plain Text
chmod 644 /etc/opt/chrome/policies/managed/managed_preferences.json
```
Using your preferred software distribution or MDM tool, deploy the following to users' machines:
1. Google Chrome Browser
2. /etc/opt/chrome/policies/managed/managed_preferences.json

note

For more help, refer to Google's Chrome Browser Quick Start for Linux guide.

To disable the Firefox Manager via group policy:

Download Firefox for Linux.
Open a terminal and navigate to the directory your download has been saved to. For example:cd ~/Downloads
Extract to contents of the downloaded file:
```
Plain Text
tar xjf firefox-*.tar.bz2
```
The following commands must be executed as root, or preceded by sudo.
Move the uncompressed Firefox folder to /opt:
```
Plain Text
mv firefox /opt
```

Create a symlink to the Firefox executable:

Plain Text
ln -s /opt/firefox /usr/local/bin/firefox

Download a copy of the desktop file:

Plain Text
wget https://raw.githubusercontent.com/mozilla/sumo-kb/main/install-firefox-linux/firefox.desktop -P /usr/local/share/applications

To disable Firefox's built-in password manager, add the following to policies.json inside of "policies": {}:
```
Plain Text
{
 "PasswordManagerEnabled": false
}
```
Create the following directory if it does not already exist:
```
Plain Text
mkdir /opt/firefox/distribution
```

Modify the directory with the following:

Plain Text
chmod 755 /opt/firefox/distribution

Additionally, we recommend admins should add the following to files to prevent modifications to the files themselves:
```
Plain Text
chmod 644 /opt/firefox/distribution/policies.json
```
Using your preferred software distribution or MDM tool, deploy the following to users' machines:
Firefox Browser
/distribution/policies.json

note

For more help, refer to Firefox's policies.json Overview or Policies README on Github.

Disable on MacOS

Download the Google Chrome .dmg or .pkg for macOS.
Download the Chrome Enterprise Bundle.
Unzip the Enterprise Bundle (GoogleChromeEnterpriseBundle64.zip or GoogleChromeEnterpriseBundle32.zip).
Open the /Configuration/com.Google.Chrome.plist file with any text editor.
To disable Chrome's built-in password manager, add the following to com.Google.Chrome.plist:
```
Plain Text
<key>PasswordManagerEnabled</key>
<false />
```
Convert the com.Google.Chrome.plist file to a configuration profile using a conversion tool of your choice.
Deploy the Chrome .dmg or .pkg and the configuration profile using your software distribution or MDM tool to all managed computers.

note

For more help, refer to Google's Chrome Browser Quick Start for Mac guide.

For additional information, see Chrome's documentation for setting up Chrome browser on Mac.

Download and install Firefox for Enterprise for macOS.
Create a distribution directory in Firefox.app/Contents/Resources/.
In the created /distribution directory, create a new file org.mozilla.firefox.plist.
tip
Use the Firefox .plist template and Policy README for reference.
To disable Firefox's built-in password manager, add the following to org.mozilla.firefox.plist:
```
Plain Text
<dict>
  <key>PasswordManagerEnabled</key>
  <false/>
</dict>
```
Convert the org.mozilla.firefox.plist file to a configuration profile using a conversion tool of your choice.
Deploy the Firefox .dmg and the configuration profile using your software distribution or MDM tool to all managed computers.

For additional information, see Firefox's documentation for MacOS configuration profiles.

Download the Microsoft Edge for macOS .pkg file.

In Terminal, use the following command to create a .plist file for Microsoft Edge:

Plain Text
/usr/bin/defaults write ~/Desktop/com.microsoft.Edge.plist RestoreOnStartup -int 1

Use the following command to convert the .plist from binary to plain text:

Plain Text
/usr/bin/plutil -convert xml1 ~/Desktop/com.microsoft.Edge.plist

To disable Edge's built-in password manager, add the following to com.microsoft.Edge.plist:
```
Plain Text
<key>PasswordManagerEnabled</key>
<false/>
```
Deploy the Edge .pkg and the configuration profile using your software distribution or MDM tool to all managed computers.
tip
For Jamf-specific help, refer to Microsoft's documentation on Configuring Microsoft Edge policy settings on macOS with Jamf.
For additional information, see Edge's documentation for configuration profiles.

Suggest changes to this page

How can we improve this page for you?
For technical, billing, and product questions, please contact support



Deactivate Browser Password Managers Using Device Management

Disable with Windows GPO

How to check if it worked?

note

Disable on Linux

note

Disable on MacOS

note

Suggest changes to this page

Molnstatus