You should not use autocomplete=”off” to disable auto complete feature in Chrome. The “off” value is being ignored both on form and input level. The new preferred variant is to set autocomplete=”new-password” on the fields that are used to set new passwords and are not to be filled in by saved values from auto complete engine. I’m not sure if this value get eaten by React as well but I just wanted to point this out.

It is recommended by one of the devs here https://bugs.chromium.org/p/chromium/issues/detail?id=370363#c7 (I found out about it from second highest voted answer at http://stackoverflow.com/questions/15738259/disabling-chrome-autofill and successfully used it few days ago in one of the work project).