Skip to main content

Password managers

Ensure password managers detect authentication fields by disabling shadow DOM in your application.

Overview​

Styling encapsulation relies on the "shadow DOM" browser feature. Password managers such as Dashlane, LastPass, or OnePassword do not detect authentication forms fields inside shadow DOMs. Therefore, if you would like to make sure that your end users can use their password managers, you have to disable shadow DOM.

These instructions are only relevant if you are using the pre-built UI components.

import SuperTokens from "supertokens-auth-react";

SuperTokens.init({
    appInfo: {
        apiDomain: "...",
        appName: "...",
        websiteDomain: "..."
    },
    useShadowDom: false,
    recipeList: [ /* ... */]
});
caution
  • SuperTokens uses a special attribute to define its styling. Disabling shadow DOM should not impact the rest of your application's styles. Verify that your CSS does not impact how SuperTokens UI appears when disabling Shadow DOM.
  • Shadow DOM is always disabled with Internet Explorer since it does not support it. Similarly, if you intend to support Internet Explorer for your application make sure to verify how SuperTokens UI appears.

See also​

Password hashingPassword resetCustomize the sign in formCustomize the sign up formHooks and overrides