diff --git a/modules/user/user.module b/modules/user/user.module
index bff6f76..db917e5 100644
--- a/modules/user/user.module
+++ b/modules/user/user.module
@@ -1083,6 +1083,9 @@ function user_account_form(&$form, &$form_state) {
         '#access' => !empty($protected_values),
         '#description' => $current_pass_description,
         '#weight' => -5,
+        // Do not let web browsers remember this password, since we are
+        // trying to confirm that the person submitting the form actually
+        // knows the current one.
         '#attributes' => array('autocomplete' => 'off'),
       );
       $form['#validate'][] = 'user_validate_current_pass';