Problems filling in login data

NikB

On one of my Bank logins, it requires you to login (using keyboard) with an 8 digit number....then you have to move the cursor/mouse over the onscreen 'keyboard' and click the appropriate letter/number combination..... so 3 problems:

1. Is there anyway of getting 1P do this automatic fill in.... I can't see a way as it requires you to move the cursor to various points on the screen (which may vary depending where the open window is sitting on the screen.....)

2. So on the assumption that I still have to do a manual fill in....I type in the 8 digit number (no problems)... then go to move the cursor over the on-screen 'keyboard', manage to click on the first 2 letters of my secret code... then 1P pops up the "1Password Save Login" box... so I select the 'Not Now' option.... and I then move back to enter the rest of my code. Is there a way of preventing this pop up occuring everytime I access this website.

3. I have tried to save just the 8 digit code in 1P but when I get 1P to fill this in by itself, it seems to execute an automatic 'Enter or Return'.. so then the login screen realises I haven't entered the secret code, and goes back to the 8 digit login again. Is there a toggle in the 1P login that will let it fill in the 8 digit code but then not execute an enter?

Any help would be appreciated.... the website in question is: https://online.westpac.com.au/esis/Login/SrvPage

Megan

Hi @NikB,

Is there anyway of getting 1P do this automatic fill in.... I can't see a way as it requires you to move the cursor to various points on the screen (which may vary depending where the open window is sitting on the screen.....)

1Password is not currently able to click points on the screen, so this is likely a step you'll have to do manually.

So on the assumption that I still have to do a manual fill in....I type in the 8 digit number (no problems)... then go to move the cursor over the on-screen 'keyboard', manage to click on the first 2 letters of my secret code... then 1P pops up the "1Password Save Login" box... so I select the 'Not Now' option.... and I then move back to enter the rest of my code. Is there a way of preventing this pop up occuring everytime I access this website.

There are two options here:

• The next time the pop-up appears, click on the gear icon in the corner, and select 'Never for this site'

• Or, go to Preferences > Browser and save this URL in the exceptions list below 'Automatically ask to Save new Logins' option.

I have tried to save just the 8 digit code in 1P but when I get 1P to fill this in by itself, it seems to execute an automatic 'Enter or Return'.. so then the login screen realises I haven't entered the secret code, and goes back to the 8 digit login again. Is there a toggle in the 1P login that will let it fill in the 8 digit code but then not execute an enter?

You can toggle the submit option for all your Logins in 1Password in the Preferences > Browser pane. If you'd like to change the submit options of just this entry, find it in the main app and select 'Edit'. Towards the bottom of the entry, you'll see the submit options. Simply change this to 'Never submit' and you'll be good to go!

I hope this helps, but if you have any further questions, we're here for you. :)

NikB

Excellent.... Thank you for solving all my queries Megan. Am happy logging into this site now.

sjk

That is excellent news, @NikB. Happy to hear you're happily logging in there now. :)

On behalf of Megan, you're most welcome. Thanks for letting us know her answers were helpful!

StretchGSK

Hello Megan & Co

Over the weekend I managed to convince my non tech savvy mate that 1Password was an essential piece of kit.
Sadly the first login he chose to implement a good 20 character random password was Westpac Australia.
As they are still using the on screen keyboard with no way of pasting a password he obviously just ended up keeping his easy to remember 8 character one.

I did not want to start a whole new thread so choose this one to ask:

"1Password is not currently able to click points on the screen, so this is likely a step you'll have to do manually."
Is this ever going to be something that is possible for 1Password to achieve?

Thanks
Stretch

Megan

Hi @StretchGSK ,

Well, we never say never, and I'd be happy to mention to our team that this is a feature you would like to see investigated, but I'm honestly not sure what would be involved technically to implement something like this.

Honestly, the better solution here is to encourage websites to stop relying on 'security theatre' measures that don't significantly improve security for users. The best thing that all users can do for their online security is to use strong and unique passwords for every site that they visit. And the best thing that websites can do to encourage good security practices is to make it simple for their visitors to use trusted password managers to save and fill details.

StretchGSK

Hi

To be honest thats the reply I was expecting and I will get my friend to contact his bank.
At least I know about this now so will keep it in mind before I sign up with banks etc.

Megan

Hi @StretchGSK ,

Thanks for understanding! We're doing what we can to encourage banks and other important institutions to adopt strong security habits, and it can only help the cause if users like yourself (and your friend) contact these sites and let them know you're interested in seeing improvements here as well. :)

StretchGSK

So I discussed the merits of OSK vs password safe and some seem to think that the randomisation offered by a OSK helps with security.
I am after a response to this that cant be countered by "well obviously 1Password will say a password safe is better"

Does this article sum up the problem with using an OSK combined with a very short password that it forces you to use?
http://ask-leo.com/will_using_an_on_screen_keyboard_stop_keyboard_loggers_and_hackers.html

StretchGSK

Some banks are openly agreeing with you :-)
http://mebank.com.au/keypad

littlebobbytables

The way I look at it @StretchGSK is that as long as you're careful, the user can really reduce their changes of their machine being compromised. I've only had one machine become infected and that was when I made the mistake of installing a fresh copy of Windows on a laptop when elsewhere on the network the blaster worm was unknowingly making the rounds (university network - go figure).

Anyway, my point is I'm much more worried about my passwords being stolen from the server or through the use of silly security measures that force short passwords than through malware on my own machine. That's my personal view and one I held long before I was given the opportunity to join this amazing company.

Personally I'd say Me Bank have got the right idea. About the only security measure my own bank uses that I can have any faith in is their fraudulent transaction detection algorithm. I won't say any more on that topic as I might start frothing at the mouth as I begin my rant :tongue:

Now if you'd like a more technical breakdown we can see if @jpgoldberg has time to look in and say a few words :smile: