Yeah that's generally how its done, but also doesn't give users the choice to use their browsers password manager or keychain. The autocomplete feature was more geared towards sensitive data that should never be re-surfaced in an automated way, such as credit card info, that sort of thing.