How do I clear stored form credentials from a role?

Steps

1. Click Edit on the profile and open Authentication.
2. Scroll to the role's form login block. The notice Form credentials stored — leave fields blank to keep it. sits at the top, with a Clear button.
3. Click Clear to drop the stored form credentials.
4. Press Save so the change sticks.

Good to know

Clear wipes the form login secrets on that role. Use it when a test account retires, when you moved the role to another method, or when a secret may have leaked.

• After clearing, the role has no form credentials. Add new ones before the next scan, or untick Form if the role now uses a header or OAuth 2.0.
• Only want to swap the password? Type the new one instead. You will find that in how to change a stored password.
• Want the whole role gone? Use its trash icon. See how to remove a login role.

Clearing affects future scans from this profile. Scans that already finished keep their results. Change the account's password on your app too, so the old one stops working everywhere.

Clearing is quick, but think about the order. If a secret may have leaked, change it on your app first, then clear it here, then add the new one. That way no window exists where the old secret still works.

Not seeing the notice? It only appears for a role that has stored form credentials. Ask through /contact if it should be there.

One more point, for the cautious. Clearing does not touch your own app. The account still exists there until you remove or rotate it.

Related questions

• How do I change a stored password on a role?
• How do I edit a role without re-entering its password?
• What does "Form credentials stored — leave fields blank to keep it." mean?
• How do I remove a login role from a profile?
• Why is the password field empty when I edit my profile?

Full tutorial

How to edit a scan profile

Step-by-step, with annotated screenshots.

Updated 8 October 2026 · Back to the help centre