If ca:autocomplete="off" doesn't work, try ca:autocomplete="new-password" instead.

<zk xmlns:ca="client/attribute">
    <grid>
        <!-- removed for brevity -->
        <textbox ca:autocomplete="new-password" />
    </grid>
</zk>