I know that if I type a password in the username text box and hit enter it is better to change the password just in case. But is it still risky to have written it in the box (with no one watching) without having hit the "log-in" button? Could it be a problem if this happened using public WIFI?
I'm a frontend developer and have made many forms over the years. First, some baseline info:
- Form data is not generally saved or processed unless its physically submitted. This is also a browser default for security of the user.
- Form data is not even entered into any browser cache unless submitted.
To check this you can open up your browser's developer tools console and check the network tab. With it open, type in the username field. Then leave it for a minute to see if there's any polling to the server happening. If any JS is firing off data to any backend you will see this as requests stacking up in the Network tab.
Doing the above steps should give you some piece of mind as to the safety of your password. Especially if it's not easily changeable.
If it's a trivial task to update your password, you may as well do it out of an abundance of caution. It would probably end up being easier than to go through all the investigation steps I mentioned above.