Cross country filling with Amazon

System

This discussion was created from comments split from: Can Autofill be smart enough to differentiate 2 different accounts on the same domain name?.

inaudible

Aha, I was just about to post about the amazon.com / amazon.co.jp issue!

I'm finding that now that I have an amazon.co.jp account (with a different password and different 2FA credentials), 1Password tries to use that password when I try to login to any other Amazon account (e.g. .com or .com.au) via autofill. It's really frustrating, and I'm guessing that there's some Amazon-specific logic in 1Password here doing this?

@littlebobbytables, do you have an update on this issue?

littlebobbytables

Hello @inaudible,

While I did reference amazon.co.jp in that thread it was more related to the difference between an AWS and standard consumer account. I've split your query about the Japanese specific version of Amazon so we can discuss it separately :smile:

If you have more than one Login item for Amazon then 1Password should never automatically fill anywhere without first prompting. You used the word autofill and that covers all manner of variations so I would like to better understand what you mean and how you currently use 1Password. Are you a keyboard user who likes to use ⌘\ or ctrl + \ (macOS or Windows) or do you prefer the mouse and so click on the 1Password button in the toolbar? The behaviour I described is more applicable to the keyboard shortcut because it's only there that there is the option of not displaying 1Password mini at all.

If you're seeing fields filled automatically with no initial interaction with 1Password that sounds like maybe the browser is storing and filling fields. We recommend disabling it so that 1Password is the one source you need to worry about. Our support page Turn off the built-in password manager in your browser can help with this if needed.

If it's something else can you elaborate a little on the steps you take that see the incorrect filling and we'll see if we can glean what might be happening from that.

inaudible

Thanks for following up!

OK, to clarify: I am on a Mac and using ⌘\ to fill passwords with the 1Password browser extension on Safari. I have two entries for Amazon sites in 1Password: "Amazon" (which I use for all Amazon sites other than amazon.co.jp) and "Amazon Japan" (.jp only)

If I go to amazon.co.uk now and hit sign in, then use ⌘\ to trigger 1Password, I get no popup asking which item to use -- it just fills the password field with the incorrect password, which I am assuming is the" Amazon Japan" one. If I use 1Password Mini to choose the "Amazon" item, it sigs in successfully.

Is there any more detail I can give you?

littlebobbytables

Greetings @inaudible,

I wonder if you can let me know how you have the website fields set up for those two items please. If you have two 1Password should always be prompting if it considers them equal matches.

inaudible

Sure thing!

Amazon Japan: https://www.amazon.co.jp
Amazon: https://amazon.com, https://amazon.co.uk, https://amazon.de, https://amazon.com.au

(i.e. one website field for Amazon Japan, four for Amazon)

littlebobbytables

Hi @inaudible,

If you saw my previous post, I deleted it because it was absolutely useless. This post will contain what you need :smile:

In the background 1Password translates all the various amazon.xy into amazon.com because one account works everywhere, except for when we mucked up and included amazon.co.jp which is the one exception and one we need to correct.

So when 1Password views these items it sees them all as amazon.com. So why isn't it prompting and instead automatically filling? If one match is an exact match to the FQDN (Fully Qualified Domain Name) and the rest are only partial matches it will use the exact match without prompting. I know for the most part we never think about www but it is technically a subdomain and it isn't special. When you're on the sign-in page for Amazon UK the page loaded is at www.amazon.co.uk and after transforming the domains the Amazon Japan entry is seen as exact because it is recorded as www.amazon.com compared to the website fields in your other item where they only reference amazon.com. If you add www to them or remove www from the amazon.co.jp entry you should find you are now always prompted no matter which page you're trying to fill.

At some point we'll correct the amazon.co.jp exception and once we do then you won't get prompted on any of the pages as there will only ever be one entry that fits.