look in the sidebar.php code and see if there is placeholder=”” in the form
It might have got included in the custom theme. Usually this has username and password in those spots. Also if someone on a computer saves that to the browser you have to delete cookies and settings to remove it. How to depends on the browser.
