Autosave + Auto-login in the browser causes newly generated passwords to be lost

1bvr

I used the 1Password for Safari extension to generate a new password for a new account. When I clicked "generate password" dropdown from the password textbox, the password fields were populated and the form was immediately submitted.

I briefly saw the "save password" prompt appear in the top-right corner, but it was lost as the next page loaded. Now I have a password configured for a website that wasn't stored in 1Password.

It seems like "auto submit" should not happen when generating a new password using the browser extension, or else this will happen every time.

---

1Password Version: 8.10.39
Extension Version: 2.27.1
OS Version: macOS 14.6.1
Browser: Safari

Dave_1P

Hello @1bvr! 👋

I'm sorry for the delayed reply. The behaviour that you've reported definitely doesn't sound right, are you able to link me to the page where you ran into this so that I can investigate further?

In the meantime, you can find the generated password in the password history:

1. Click on the 1Password icon in your browser's toolbar.
2. Click the menu button and then click Password Generator.
3. Click Password Generator History.

I look forward to hearing from you.

-Dave

1bvr

Hi @Dave_1P

I was able to force a password reset through the account's website and manually copy/paste a replacement password to make sure that the generator didn't auto-submit the page again.

I'd like to help more, but this may be tricky. It is the account setup page to a mortgage lender, and they require that you input some loan-specific information before you can create the account. This URL is probably as close as I'd be able to get you to their password creation page.

https://account.mrcooper.com/ed04d0f3-eba1-467f-91e7-52505132554c/oauth2/v2.0/authorize?p=B2C_1A_CreateAccount&client_id=2a694b91-5631-4fe1-9039-775a23b420c8&nonce=defaultNonce&redirect_uri=https://www.mrcooper.com/sessions/login&state={"redirect":null}&scope=openid&response_type=id_token&prompt=login&response_mode=form_post&session_id=a47cffd8368f0fa970a4b1644e87c81d&guid=be669f97-7134-42f4-bbd1-53b8a9993713&ga_client_id=&x-client-SKU=undefined

Dave_1P

@1bvr

Thank you for providing the website URL. I see that this is a known issue that our development team already has a work item open for. While I can't say when the issue will be resolved, this is something that is on the team's radar.

I'm happy that you were able to recover your password. If the issue happens in the future on another website then let me know, and you can always find the generated password in the password generator history as I mentioned above.

Let me know if you have any questions. 🙂

-Dave

ref: dev/core/core#31123