Platform

Platform overview How it works Authorization testing Evidence & reports Private scanning Integrations

Solutions

Security agencies Product teams Regulated industries Partner programme

Learn

Blog Knowledge hub Compare

Resources

Pricing Documentation Help centre FAQ Security & data What we haven’t proved

Company

About Contact Careers Sign in to the platform Start a $199 pilot →

Home / Help centre / Authentication & logins

Authentication & logins

What does "Form credentials stored — leave fields blank to keep it." mean?

Quick answer

"Form credentials stored — leave fields blank to keep it." means this role already has a saved form login. Leave Username and Password empty to keep it. Click Clear only if you want to remove the saved credentials and enter new ones.

Why this happens

The box shows on edit when a role already has a saved form login. Cyberlop stores secrets encrypted and never shows them again, so the fields look empty. That box tells you the login is still there.

How to fix it

You have two choices. Pick the one that matches what you want.

You want toDo this
Keep the login as it isLeave Username and Password blank, then click Save
Change the loginType the new username and password, then click Save
Remove the saved loginClick Clear, then Save
  1. Open the profile and choose Authentication.
  2. Find the Form login block of the role.
  3. Look above Login type for the stored-credentials box.
  4. Choose keep, change or clear from the table above.
  5. Click Save at the foot of the page.

The other form settings stay visible. Login URL, Success condition and Login flow are not secret, so they show as saved.

The Clear button matters when a person leaves your team or a password is rotated. Removing the old login stops the profile from carrying a credential nobody owns. Add the new one in the same visit, and save once, so the profile is never left half set up and the next scheduled run does not fail on a missing login.

Still not working?

If you cleared the login by mistake, add the username and password again and save. Without credentials the scan cannot sign in, so pages behind login will go untested. For the whole picture, see how to clear stored form credentials. We can also help at /contact.

Full tutorial

How to scan behind login in Cyberlop with authentication roles

Step-by-step, with annotated screenshots.

Updated · Back to the help centre

Still stuck?

Tell us what you see on screen and an engineer will help you sort it out.