1Password autofill injecting additional characters?

mikestanley
mikestanley
Community Member
edited May 2022 in Mac

I'm having an issue with one website that I've never seen before. When I have 1Password autofill both the username and password fields, the username works fine, but the password appears to have 20 additional characters (a space and 19 •'s) inserted after the password. So when I click "Show" in the password field, I see the following (with my password replaced with PASSWORD):

PASSWORD •••••••••••••••••••

For what it's worth, it doesn't seem to matter how long my password is. For testing, I reduced it to 10 characters, and 1Password still added
" •••••••••••••••••••" after the password, same as it does with a much longer password.

So when I try to log in, the website doesn't recognize the password (of course).

As a workaround, I can simply copy the password and paste it into the password field, without issue. I can also manually enter the password, which I did at first because I thought the site was somehow interfering with pasting. But it seems that even though 1Password can enter my username into the username field without issue, these extra characters are inserted into the password field.

This isn't the end of the world. Now that I know autofill isn't working properly (but just for this one site), I can just copy and paste. But that is does add additional overhead to the login process even assuming I can remember to do that every time.

BTW, it doesn't seem to matter which browser I use - either Safari or Edge.

I guess my question is - this clearly isn't expected behavior - is there anything I can do within 1Password to prevent this, or will I need to just copy and paste my password?

BTW, I was going to report that this appears to work/not work similarly on 1Password on iOS 15.5, but I just looked at my credentials for this site on my iPhone and, believe it or not, the entire password appears to be •'s - 19 of them. And I mean when I select Show in Large Type I get this:

This seems really strange, and I can assure you the password appears as expected in 1Password on my Mac. I just checked 1Password on my iPad and it also shows all dots. I don't know what to make of that, and I'm not sure if it has something to do with the main problem I'm citing above?

1Password Version: 8.7.0
Extension Version: 2.3.3
OS Version: 12.4

Comments

  • Alvin.L_1P
    Alvin.L_1P
    edited May 2022

    Hey @mikestanley,

    To test things out on my end, can you share the website where you're experiencing this issue on, or if you'd like to share it privately, send an email addressed to support+forum@1password.com with the website URL and a link to this thread:

    I look forward to your reply and helping you further.

    Alvin

  • mikestanley
    mikestanley
    Community Member

    Thanks @Alvin.L_1P !

    I've sent the site to you via email as requested.

    In the meantime I wanted to fiddle with this a little bit more and the short version is I now have it working, but I have no idea how/why. Here's what I did.

    I duplicated the existing site in 1Password on my Mac, changing it only to name it -Duplicate

    I then edited the entry and generated a new password.

    When that synced over to my iPhone, its password also showed up as all dots. Weird, but consistent, I guess?

    So I then edited the entry on my iPhone, generated a new password, which of course was not all dots, and since I had left the entry open with the password revealed on my Mac, I saw that password immediately appear, looking normal.

    At this point I took a little break to put my son to bed, but thinking the whole time, I wonder what happens if I log into the site with the current password from the original entry, change my password to what is in the -Duplicate entry, and see what happens if I autofill it?

    So I did that. Changed the password, saved it, and logged out of the site. Went back to the login page, and selected -Duplicate.

    At first, I was very worried, because when I hit the Show button on the site to show my password, it wasn't just the password with 19 dots after it - it was all dots. But I was able to login. That made no sense, so I switched from Safari to Edge, autofilled, hit Show, and the password was there normally, with no dots after it. And I was, of course, able to login.

    So I'm guessing even though the site is willing to reveal my password, Safari somehow won't? I'll admit I'm stumped by that, but I'm not in the habit of revealing my password once it's been autofilled, and I'm not sure that show functionality is that common.

    Aside from the difference between how Safari and Edge handle that, thought, I think this is fixed.

    Like I said, though, while I can list the steps I took that resulted in this issue being fixed, I don't understand why it fixed it. But I also don't understand why it was not working in the first place.

    I'm mostly just happy it is working now, and I really appreciate your fast response!

  • mikestanley
    mikestanley
    Community Member
    edited May 2022

    @Alvin.L_1P

    And here's a quick follow-up. I guess it's the IT nerd in me that wants to keep poking this to see if I can understand it. This is what I just did.

    Renamed my original entry -OriginalBroken - mainly to preserve it but make it clear I should avoid it.

    Duplicated that entry and renamed it -OriginalButNewPW

    Copied the password from my working entry - which is now named -Working and pasted it into -OriginalButNewPW.

    Tried to autofill that entry into the site, in Edge. Hit the Show button and BAM - what do I see but the password, a space, and 19 dots.

    This suggests to me something about the original entry is messed up in a crazy way that is preserved when it is duplicated and continues to inject that odd string when autofilling, but I have no idea what it is.

  • Alvin.L_1P
    Alvin.L_1P

    Thanks so much for the very detailed information @mikestanley ! I'll keep an eye out for the email and will be in touch as soon as possible.

This discussion has been closed.