Google has been doing this for years, if not over a decade at this point. Password managers have gotten wise about it though, so for some websites it actually works.