diff --git a/wp-admin/user-edit.php b/wp-admin/user-edit.php
index 6cf15f2529..13a2f63923 100644
--- a/wp-admin/user-edit.php
+++ b/wp-admin/user-edit.php
@@ -189,8 +189,8 @@ if ( ! IS_PROFILE_PAGE ) {
 } ?>
 </h2>
 
-<form id="your-profile" autocomplete="off" action="<?php echo esc_url( self_admin_url( IS_PROFILE_PAGE ? 'profile.php' : 'user-edit.php' ) ); ?>" method="post"<?php do_action('user_edit_form_tag'); ?>>
-<?php wp_nonce_field('update-user_' . $user_id); ?>
+<form id="your-profile" action="<?php echo esc_url( self_admin_url( IS_PROFILE_PAGE ? 'profile.php' : 'user-edit.php' ) ); ?>" method="post"<?php do_action('user_edit_form_tag'); ?>>
+<?php wp_nonce_field('update-user_' . $user_id) ?>
 <?php if ( $wp_http_referer ) : ?>
 	<input type="hidden" name="wp_http_referer" value="<?php echo esc_url($wp_http_referer); ?>" />
 <?php endif; ?>
diff --git a/wp-admin/user-new.php b/wp-admin/user-new.php
index 9c90483f3c..13a8e12deb 100644
--- a/wp-admin/user-new.php
+++ b/wp-admin/user-new.php
@@ -299,7 +299,7 @@ if ( current_user_can( 'create_users') ) {
 		echo '<h3 id="create-new-user">' . __( 'Add New User' ) . '</h3>';
 ?>
 <p><?php _e('Create a brand new user and add it to this site.'); ?></p>
-<form action="" autocomplete="off" method="post" name="createuser" id="createuser" class="validate"<?php do_action('user_new_form_tag');?>>
+<form action="" method="post" name="createuser" id="createuser" class="validate"<?php do_action('user_new_form_tag');?>>
 <input name="action" type="hidden" value="createuser" />
 <?php wp_nonce_field( 'create-user', '_wpnonce_create-user' ) ?>
 <?php
diff --git a/wp-login.php b/wp-login.php
index 7edec2b67d..ddde661667 100644
--- a/wp-login.php
+++ b/wp-login.php
@@ -503,7 +503,7 @@ case 'rp' :
 	login_header(__('Reset Password'), '<p class="message reset-pass">' . __('Enter your new password below.') . '</p>', $errors );
 
 ?>
-<form name="resetpassform" id="resetpassform" autocomplete="off" action="<?php echo esc_url( site_url( 'wp-login.php?action=resetpass&key=' . urlencode( $_GET['key'] ) . '&login=' . urlencode( $_GET['login'] ), 'login_post' ) ); ?>" method="post">
+<form name="resetpassform" id="resetpassform" action="<?php echo esc_url( site_url( 'wp-login.php?action=resetpass&key=' . urlencode( $_GET['key'] ) . '&login=' . urlencode( $_GET['login'] ), 'login_post' ) ); ?>" method="post">
 	<input type="hidden" id="user_login" value="<?php echo esc_attr( $_GET['login'] ); ?>" autocomplete="off" />
 
 	<p>