Browser autofill is a feature that stores personal details, passwords, and other form data so the browser can enter them automatically later. It can save time, but it also concentrates sensitive information in one place: the browser profile. That makes autofill data attractive to attackers because it may include names, addresses, payment details, login credentials, and sometimes recovery or identity information.
In cyber attacks, malware and infostealers often look for autofill records alongside saved passwords, cookies, and session tokens. If an infected device leaks this data, an attacker may gain access to accounts without needing to crack a password. Defenders reduce this risk by limiting what the browser is allowed to save, using phishing-resistant MFA, keeping systems patched, and treating browser profiles as sensitive assets on both personal and managed devices.