How to report Smart Password Generator errors?

nukmicah

1Password suggested an incompatible password for me at https://order.wendys.com. From this comment, I learned:

Smart suggested passwords use Apple's open project that stores known websites' passwords requirements, in addition to 1Password’s internal brain.

Is there any way for users to report to Apple websites where it's incompatible, so that Apple can fix it (for them and for 1Password)?

1Password suggested:
kda_cru@EMG-nea6vgh

Requirements are:
6-20 characters in length
one UPPERCASE letter
one lowercase letter
one number
Can use: !#$%*/?^()’{}&+-=_

So, the "@" character wasn't allowed.

---

1Password Version: N/A
Extension Version: 2.1.4
OS Version: Windows 10

ag_ana

@nukmicah:

Yes, you can do that on the Apple's GitHub project here :+1:

nukmicah

Thank you! I filed an issue https://github.com/apple/password-manager-resources/issues/550 but we'll see if anyone actually makes a pull request for it.

nukmicah

@ag_ana, do you know what this response means?
https://github.com/apple/password-manager-resources/issues/550#issuecomment-989118920

Those requirements look pretty reasonable to me. At least, iCloud Keychain doesn’t have a problem with them.

Jack.P_1P

Hey @nukmicah:

iCloud Keychain uses a different base set of rules to generate passwords than the Smart Password Generator does. In this case, our set of symbols is !@.-_*, but Apple's set of symbols only includes - by default. In this case, because iCloud Keychain is not going to use the @ symbol to generate any possible passwords, the rule wouldn't be necessary for iCloud Keychain to generate a valid password, but would be necessary for the Smart Password Generator to generate a valid password.

With that in mind, I'll go ahead and do what's necessary to get this sorted out in the password manager resources repository, so hopefully soon you should see better passwords when generating passwords at Wendy's! :smile:

Jack

nukmicah

Hi @Jack.P_1P, looks like another website will likely need custom 1Password handling. I filed a quirk report at https://github.com/apple/password-manager-resources/issues/610, but note that your default symbols include @ which is unsupported at https://www.ccs-grp.com/regist/entry/ but not used by default by Apple.

nukmicah

Oops, I mean @ and also * are unsupported.

SvenS1P

Hey @nukmicah – thanks for filing that! I've just made a pull request to add the website as a quirk. I found a few more unsupported symbols there too.