TOTPs become "stale" in 8.10.7 beta
This is a difficult one to describe, but, simply put, when using 1P on iOS (latest offical release, not beta iOS), and 1P 8.10.7, sometimes the TOTP (such as for PayPal) are not accurately displayed.
The issue seems to be related to when iOS backgrounds the 1P application and foregrounds it. 1P gets a bit confused as to what the code and timer should display, resulting in the wrong code being potentially provided.
In my case, this was repeatedly possible to show as an issue with the following flow:
- iOS app which permits payment with PayPal
- I ran 1P and searched for my PayPal account, as I know that the app from (1) and the WebView it seems to use won't auto-paste the OTP as it will on macOS or even sometimes on iPadOs - goal was to have 1P ready with the right value to quickly get the TOTP when needed
- Ran the iOS app, navigated to the area where I needed to pay, clicked the various bits to get to PayPal, signed in with password.
- Used iOS to go back to 1P and grab the displayed TOTP, which was counting down (had about 20 seconds left)
- Provided TOTP to iOS app/PayPal, told it was wrong
- Went back to 1P and watched the counter for the same TOTP count down to zero - when it hit zero, the number changed for a fraction of a second to a completely different TOTP before changing again to a new TOTP with the full 30 seconds remaining
- Provided that new TOTP to PayPal, all good
I went back and forth to 1P to try to replicate this and could see that the decrementing timer would apparently freeze and resume when the app was backgrounded. Several times I was able to get it to show the wrong code for too long, or, not display the right code as per the above.
Hope that makes sense.
1Password Version: 8.10.7
Extension Version: Not Provided
OS Version: iOS 16.5
Browser:_ Not Provided
Comments
-
Hello @doetraar! 👋
Thank you for reporting the issue! So that our team can investigate further, I'd like to ask you to create a diagnostics report from your iOS device:
Sending Diagnostics Reports (iOS)
Attach the diagnostics to an email message addressed to
support+forum@1password.com
.With your email please include:
- A link to this thread: https://1password.community/discussion/140343/totps-become-stale-in-8-10-7-beta#latest
- Your forum username:
doetraar
- Please do not post your diagnostic report to the forum. This is for your privacy and security.
The report will be in zip format. Please send the entire file.
You should receive an automated reply from our BitBot assistant with a Support ID number. Please post that number here. Thanks very much!
-Dave
0