[dev] Is there a way to show 1Password that this is login form (not registration)

sergeyrud

Hi there. I'm a software engineer. I have a lot of authentication forms on my website that pop up when a user wants to make a sensitive action. Sometimes 1Password X (chrome extension) suggests a new password even though there is a saved password for this website.

Users don't appreciate the fact that instead of showing saved passwords for this website 1Password suggests to generate a new password.

Is there a way to explicitly show to 1Password that this password should be filled in with the saved password? That this is an "authentication" form and not a "registration" or "change password" form.

Password field looks like
<input id="0do59" class="field" type="password" name="password" autocomplete="current-password" aria-label="password input" data-op-id="1">

Thank you.

---

1Password Version: Not Provided
Extension Version: 1.16.2
OS Version: MacOS
Sync Type: Not Provided

ag_yaron

Hey @sergeyrud ,
1Password X will suggest a new password if it does not recognizes the URL of the website in one of the existing logins you have stored in 1Password. That means that if the user saved a login at "https://website.com", 1Password X will suggest to autofill that password anywhere on that domain. However if the domain changes and the user reaches a page such as this: "https://website.login.com", then 1Password X will understand it is a different website and will not suggest filling in the existing login. (subdomains should also be ok, so "https://login.website.com" will also be correctly identified and autofilled by 1Password).

If that is not the case and your website keeps true to its domain at all pages, then I'd like you to give our lates beta a try and see how it behaves, since we changed some autofilling logic there. Please download it and let me know how it goes.

sergeyrud

Hey @Yaron. Thank you for the response.

No, it's not the case. My problem is that I can fill in the form with the saved password, but it's not the default action. Default action is generating the password.

I'd like to have some official way to help 1Password make this decision. I found out that if I add name="sign-in" to the button, 1Password thinks that this is an authentication form and do not suggest to generate a new password. For instance:
<button name="sign-in">Update something</button>
But it's a workaround and it's not reliable.

It would be great if you could explain how 1Password decides what to show (saved password or generated password) and add this information to https://support.1password.com/compatible-website-design

Thanks.

ag_yaron

Hey @sergeyrud ,
Thanks for the additional details and the workaround. Were you able to replicate that behavior in the latest beta of 1Password X?
And is it possible for you to share the website's URL with us so we can test it here as well?