It seems a site can expose a url to let password managers change passwords: https://w3c.github.io/webappsec-change-password-url/ https://web.dev/change-password-url/