Auto Fill of URL Not Working
I have a strange problem when using the 1Password app on Windows 10 to "Open and fill" a Login entry. The resulting URL has a string of letters and numbers appended to the URL resulting in a failed login. It's possible that the appended string is coming from the browser or the web site, but I really think it's the 1password app somehow. See testing details below. I have conducted a number of tests. This is only a problem with the one URL (below). If I launch the website using the 1password browser extension, it works correctly. If I try launching the website from 1password.com, it works correctly. If I copy the URL from the 1password app and paste it into the browser URL it works. I'm only having a problem when clicking on the "Open and fill" with the 1password Windows app. I have also tried using different browsers and clearing the browser cookies and cache. I have also tried creating a brand-new login entry - same problem. Is this a possible bug in the app or is there something else I need to clear? I have tried this on 2 different computers.
The problem URL is the online banking site for a bank called "Farmers and Drovers". The main site is "http://farmersanddrovers.com/" where there is an "Internet banking login" button. The button takes you to "https://web9.secureinternetbank.com/PBI_PBI1151/Login/101102166" where the userid and password can be entered. The 2nd URL is configured in the 1password app as a Login with the appropriate userid and password. When clicking on this entry to open and fill, the resulting URL is "https://web9.secureinternetbank.com/PBI_PBI1151/Login/101102166?jm6esm7nrsw2eayswx7hs55ghi=amx4rhsxsad2dcftyjjwarbsqe" (note the appended string) and the website message is " For security reasons, your session has ended. Log in again.". The append string appears to be a session ID or something similar causing the failure. As mentioned above, the un-appended URL works fine, except with auto filled from the app.
Any thoughts on how to resolve this problem? Thanks
1Password Version: 7.9.828
Extension Version: 2.2.3 (Edge)
OS Version: Windows 10
Comments
-
I have continued to have this problem and have now noticed this occurring on many sites, including this community forum. It appears that the 1Password app on Windows is appending a string of letters and numbers to the end of the URL which is filled. For some sites, this information is ignored, but others treat it as a bad URL. For example, I have an entry with this URL "https://1password.community". If I manually paste it into the browser, the site opens and the same URL is shown. However, if I use the 1Password Windows app to 'Open and fill' the URL show in the browser has a long string appended. https://1password.community/?ha4kibp25m3v6khf3sarixygae=6rsoeke7h7ckwunwsw27t2nfa4.
I need some help figuring out the cause of this problem. I have attached a couple images to show the difference.
After manual paste of the URL:
After Auto-Fill from 1Password app:
0 -
Hi @CraigThebiker! The behavior you're describing is indeed specific to "open and fill" from the 1Password for Windows app. We append those characters as instructions to the extension, essentially saying "when this page loads, fill this entry's credentials". Please note that these characters do not contain any user data so your information is completely safe.
That said, there are sites that do not work well with these extra characters in the URL. The best suggestion we have at the moment is to open your browser and navigate to those sites manually. Then you can use the extension to fill on that page (as opposed to using open and fill from the desktop app).
I'm truly sorry for the inconvenience, but I do hope this clarifies what's going on. Let us know if you have any other questions.
0 -
Thank you Joy_1P,
I have been exchanging emails with 1Password Support [#SUR-14387-814] regarding this issue and have been told the same story. I suggested that a new feature should be added to allow doing just an "Open" and not an "Open and fill", which would not append the string to the URL. I suggested that this could be enabled with a checkbox setting on each login item - much like the "never display in browser" checkbox. I was also told that a similar feature was partially being added to 1Password 8. Where you could click the drop down next to "Open and fill" and click on the new "GO" option, which would only fill the URL and no string would be appended. This is great, but only half the solution. Once I discover an issue with a site, I would like to customize the entry for that site and be done with it. As it is today, I already have a couple work-arounds. I can select “Copy” and then manually paste the URL in the browser. Or I can use the browser extension find the entry and “Open and fill”. The ability to customize 1Password entries is one of the powerful features of the product. The whole purpose of the product is to simplify and automate the process.0 -
Thanks @CraigThebiker
I can see that you've been interacting with Dayton and that they've shared your suggestion with our development team. If you have any questions or if there's anything else we can do to help, please let me know! In the meantime, thank you for your support!
0
