Login for one site is being used in a completely different site!

ric1958alonso
ric1958alonso
Community Member
in Mac

Last week I upgraded to 1PW 8. Today I tried to log in to my bank on Chrome for the Mac using the 1PW shortcut CMD-. It gave me an error and I noticed that my username was wrong. On my bank's page I was able to view the password being used. I looked it up on 1Password and it was the password to a completely different site. And it did use the username that was being entered in my bank.
I went to Chrome extensions and noted that there were 2 different 1Password extensions. I deleted both and quit chrome. I went to 1 Password and proceeded to add the new extension. The problem persisted.

I get the correct login in Safari and Firefox. This only fails in Chrome. Pretty scary when the password manager I've trusted for years starts to mix up the logins for sites.

1Password Version: 8.8.0
Extension Version: 2.3.7
OS Version: 12.3.1
Browser:_ Chrome 105.0.5195.52

Comments

  • Jack.P_1P
    Jack.P_1P

    Hi @ric1958alonso:

    Thanks for letting us know about this. This is an issue we discovered and recently fixed in version 8.9.4 of 1Password for Mac. While the situation that resulted in Chrome being added as a linked app to the affected Login item will no longer occur in the future, you'll need to edit the item that's being filled to remove the Linked App for Chrome. The affected item will look something like this:

    Edit the item, and remove the Linked App for Google Chrome, and it should be resolved from that point on.

    Let me know how you get on with that.

    Jack

  • ric1958alonso
    ric1958alonso
    Community Member

    Jack,

    I think you may have mistaken my problem with someone else's. My problem wasn't that Chrome was being added as a linked app. My problem only existed in Chrome, not any other browser. I tried logins to all of my credit card sites and they worked fine. It was only Wells Fargo that used another site's login.

    I don't see that you've addressed my problem: 1PW8 used another site's login information when I tried to log in to Wells Fargo using the keyboard shortcut. Using the 1PW icon in the username field resulted in the correct login for Wells Fargo, but the keyboard shortcut used a different site's login.

    Sincerely,

    Ric

  • Jack.P_1P
    Jack.P_1P

    Hi @ric1958alonso:

    Thanks for following up. When you initially filled using the keyboard shortcut, were you prompted with a dialog that said "1Password can't verify that Google Chrome should have access...." before 1Password filled the incorrect Login item? If that's the case, then you would have likely been affected by the issue I referred to above. Updating to 1Password 8.9.4, as well as removing any Linked Apps for Logins that were created by using Fill & Update Login should clear things up for you.

    Let me know.

    Jack

  • ric1958alonso
    ric1958alonso
    Community Member

    Jack,

    No, I did not get a warning at all. And I have received these warnings in the past. It explains that Chrome may be updating. I quit and restart Chrome and 1PW works again. I did quit and restart Chrome, I emptied the cache and even rebooted, but the problem persisted. This is exactly what happened.

    1) I put the cursor into Wells Fargo's username field.
    2) I hit CMD-.
    3) 1PW8 enters the username and password for my CCBill account and automatically submits.
    4) Wells Fargo returns a login error.

    Before upgrading, using 1PW7, Well Fargo did not automatically submit my login. I had to click on the submit button manually. I remember a long time I could choose whether to automatically submit a login or to enter it and let me do it manually. I could choose that by each site login. The pulldown to make the choice was right underneath the username and password. But I haven't seen that feature in a while. I've looked to see if that has been moved, but I can't find it.

    Have a good weekend,

    Ric

  • Jack.P_1P
    Jack.P_1P

    Hi @ric1958alonso:

    Thanks for following up. Does your CCBill Login item in 1Password contain a Linked App section like the screenshot I shared above? If it does, edit that item and remove the link, and this should prevent it from being filled into other websites.

    Let me know.

    Jack

  • ric1958alonso
    ric1958alonso
    Community Member

    Nope. I have never linked any of my login items to any app. I didn't even know you could do that. I have no idea what that's for. But, like I answered in the email reply earlier today, if I had seen the Chrome icon when I went to the login, I would have taken a screenshot because I have never seen an app icon in any of my logins. It would have stood out like a sore thumb.

  • Jack.P_1P
    Jack.P_1P

    Hi @ric1958alonso:

    In that case, taking a closer look at your specific setup in detail would be best. I'd like to ask you to create a diagnostics report from your Mac:

    Sending Diagnostics Reports (Mac)

    Attach the diagnostics to an email message addressed to support+forum@1password.com.

    With your email please include:

    You should receive an automated reply from our BitBot assistant with a Support ID number. Please post that number here. Thanks very much!

  • ric1958alonso
    ric1958alonso
    Community Member

    Jack,

    I went back to version 7 once I saw what was happening. This was over a week ago. Version 8 was deleted at the time I went back to 7. So will running a diagnostic show you anything? Version 7 is working normally. Unfortunately I do not have the time to install version 8 and see if the problem continues.

    If no one else had this issue, then perhaps something in version 8 got corrupted.

    You can consider this matter closed on my end.

    Best - Ric

This discussion has been closed.