New and Improved(?) TD App

koschate
koschate
Community Member

The new TD app doesn't appear to allow one to paste a password any more. Has anyone had a different experience?

Comments

  • AGAlumB
    AGAlumB
    1Password Alumni
    edited March 2015

    @koschate: Is this a specific 3rd party iOS app that's been updated and no longer allows pasting into the login fields? I am not familiar with this 'TD' app myself, I'm afraid.

    If the developer of the app is preventing the ability to paste your username and/or password, perhaps they'd be interested in adding support for the 1Password iOS extension so that customers can use it to log into the app securely! We've done most of the work for them (with some help from Apple and their new-in-iOS-8 extension framework!) so that they can have their app access 1Password for you to log in to their app.

    We aren't able to reach out to every individual developer, but if you direct them to our extension page, we have links to all the information they need to add 1Password support -- and they can always reach out to our developers if they have any questions. I hope this helps! :)

  • koschate
    koschate
    Community Member

    This is the Toronto-Dominion Bank's iOS app. Previous versions allowed one to at least paste in a password, but it usually took a few tries. Now, they don't even allow one to paste anything into the password field.

    Unfortunately, I doubt if they could be convinced to add an extension by me alone.

  • AGAlumB
    AGAlumB
    1Password Alumni

    @koschate: Ah! Thank you for clarifying. Is this the one?

    At any rate, there are a lot of other 1Password users out there. I doubt you're the only one who happens to also be a TD customer, and if many make their voices heard they may be persuaded yet! I am mentioning this to the team to see if any of our Canadian natives happen to be TD customers themselves.

    Only one of my banks (okay, as I write this I realize how ridiculous it sounds, but it's true) has added 1Password support, but I am persistent! I just keep reminding myself that the first one did, after all, so I just need to persevere. ;)

    You mentioned that copy/paste in the app had some issues before as well, so it may be worth contacting them anyway, if it may be a bug that is preventing it from working now. And of course that would be the perfect opportunity to mention 1Password. It only takes a spark. :chuffed:

  • wkleem
    wkleem
    Community Member

    That app isn't the only one to do this. I had issues with Endomondo on iOS. The app login refused to let me copy-paste from 1Password. I removed it from my phone because of this. I've just retried the app and now it worked sometimes after 5 or more attempts.

  • AGAlumB
    AGAlumB
    1Password Alumni
    edited March 2015

    @wkleem: Ouch. And after we fought so hard to get copy/paste on iOS in the first place! I hope this isn't becoming a trend. Nothing like making everyone memorize and manually enter passwords to get them to use '12345678'. >_<

  • skippingrock
    skippingrock
    Community Member

    @koschate I have both the TD for iPad app and the TD (Canada) iPhone app and I can confirm that the new iPhone app is the problem one. The iPad version still allows you to paste in the password.

    I did find a way for you to be able to paste the password into the iPhone app; but is is not really ideal I think for iPhone users.
    1. Use a Bluetooth keyboard paired to your iPhone
    2. Copy your password for your TD account from 1Password
    3. Go to the TD iPhone app and do a cmd-v (Mac style paste) on the Bluetooth keyboard
    4. The password will paste in
    5. Don't hit login just yet or the app will complain that you haven't entered anything into the password field
    6. Add a space (or any other character) to the end of the password you just pasted in
    7. Delete that extra character
    8. Hit Login
    9. You're in!
    10. Whoopee yeah fun, like you'd do that in real life.

    So basically the only way you can paste it in is by using an external keyboard to paste it in. Not something that most iPhone users will have next to their iPhone.

    But you wanted a way, and that is the only way as they have disabled the press-pop-up menu in the fields.

    My only suggestion is to log in to EasyWeb and use the Contact Us link to give feedback about this to TD that you need to have this activated because you use a password vault app to store your insanely long TD password. And while your at it, put in a plug for 1Password to add secure login support.

    SkipR.

  • wkleem
    wkleem
    Community Member

    @brenty

    It was a months old problem for me to get it to work without success. I've moved on to other apps.

    https://discussions.agilebits.com/discussion/comment/136631#Comment_136631

    The issue on iOS sounds like the Endomondo app simply doesn't allow you to paste your password into it's login form. Sadly, this is not something we have control over. You would need to contact Enodomondo and ask them to stop preventing you from using your secure generated password by pasting it.

  • AGAlumB
    AGAlumB
    1Password Alumni

    @skippingrock: Oh my god. That is amazing. :+1: :+1: You certainly pulled out all the stops there! But also, ouch: the lengths we must go to sometimes.

    @wkleem: I understand. These stories don't always have a happy ending. But sometimes it leads us to find an even better alternative. One of these days when I find the perfect todo list app I will write a book about my own journey. :p

    In these situations, it is definitely worth a shot to reach out and just give the app developers (in this case, the bank) some constructive feedback. You never know when you might make a real difference! :)

  • skippingrock
    skippingrock
    Community Member

    Hi, here is my note that I sent the TD Mobile Applications department. You can find the link to do the same under TD Canada Trust Email Contacts near the bottom left of the page.

    www.tdcanadatrust.com/customer-service/contact-us/email/contact.jsp

    Hello, it has been revealed that with the update of the new iOS TD (Canada) iPhone app that you can no longer use the tap and hold system service to paste in your password from somewhere else.

    We would please implore you to make this system feature available again.

    The reason is that many of us use a password vault application called 1Password to store our passwords.

    My password for my TD accounts is very, very long and not something that I really want to be typing in each time I want to access my accounts on my iPhone. Now this is impossible and forces me to have a much shorter and less secure password for entry.

    With your 100% online protection promise, you state that TD guarantees protection while accessing our accounts online. It also goes on to say however that we must do our part to ensure security on our end to protect our account.

    This slight change to the iPhone app changes and restricts what I can realistically do on my end. I can no longer expect to have a long and complicated password. Secondly I have to type this password in by hand which bystanders could possibly see what was entered because of iOS's setting to highlight the keys that you touch and show the character you type in the password field before it blanks it out into the masked bullet (•).

    This is not ideal. So please allow us to paste in our passwords once again into the iPhone app and keep the ability to be able to do this in the iPad app.

    I do not want to be shortening and weakening my password.

    Having this just encourages people to have passwords like "12345678" or something memorable like that.

    That all said, there is another option in iOS 8. As you know Apple has created extensions for apps to be able to speak to each other.

    The creators of 1Password have created an extension to allow apps to be able to access the login for sign in of that app. The user is then able to have the super secure password that they want for TD and only need to remember the one super secure master password for their 1Password Vault.

    AgileBits Inc., the makers of 1Password is a Canadian based and owned company with headquarters right there in Toronto.

    They provide a page to get more information about 1Password integration. 1Password is also free for the features needed for this integration (paid is for other item types like passports and such.

    There is the link they provide:
    https://support.1password.com/ios-extension-faq/#my-favourite-app-does-not-support-the-app-extension-yet-what-can-i-do-

    Thank-you for your great apps.
    Please help us do our part of the 100% online guarantee by allowing use to have long passwords that we can either paste in or use 1Password.

  • skippingrock
    skippingrock
    Community Member

    One other thought about accessing your TD account on your iPhone until they fix this "feature" is to use the web browser within 1Password and go to Easyweb or Webbroker. But then you don't get the cheque deposit feature and native support.

  • wkleem
    wkleem
    Community Member

    I would be somewhat worried about the Bank's iOS apps as the FREAK SSL flaw now extends to the Android and iOS App Store as well.

  • AGAlumB
    AGAlumB
    1Password Alumni
    edited March 2015

    @wkleem: Excellent point! While I know that the FREAK flaw was addressed in the iOS 8.2 update, the TD Bank app lists only 'Minor fixes' for its recent updates, so it is hard to say whether they have -- or need to -- update the libraries they are using for TLS/SSL.

    @skippingrock: That is quite the composition there! How could anyone say know to that? As you suggest, using the website instead of the app can be a good workaround...unless you need to take advantage of mobile deposit (man, I take that for granted now).

    With your 100% online protection promise, you state that TD guarantees protection while accessing our accounts online. It also goes on to say however that we must do our part to ensure security on our end to protect our account.

    Well put.

    The creators of 1Password have created an extension to allow apps to be able to access the login for sign in of that app. The user is then able to have the super secure password that they want for TD and only need to remember the one super secure master password for their 1Password Vault.

    Please help us do our part of the 100% online guarantee by allowing use to have long passwords that we can either paste in or use 1Password.

    It is high praise indeed, and yet humbling, that you took the time to write this and share it with us. Thank you. :)

  • koschate
    koschate
    Community Member

    Apparently we've been heard. I just got this email from TD:

    Thomas, I'd like to confirm that we've received similar feedback regarding this issue.

    We are presently working to resolve the issue preventing password copy/paste and the use of password managers.

    I encourage you to stay tuned to our Twitter feed @TD_Canada for an update.

  • Excellent! Love to see when a company is responsive like that. :)

  • skippingrock
    skippingrock
    Community Member

    I got the same message:

    Hi @skippingrock ,

    Thanks for connecting with us here today.

    @skippingrock , I'd like to confirm that we've received similar feedback from some of our other iPhone clients. We are presently working to resolve the issue preventing password copy/paste and the use of password managers.

    I encourage you to keep an eye on our Twitter feed @TD_Canada for an update on this matter.

    We appreciate your business, @skippingrock , and your feedback is important to us. Please enjoy the rest of your day!

    Warm Regards,

    Geoffrey P.

    Internet Correspondence Representative

    Hopefully they take our advice and contact AgileBits! A collaboration of Canadian (and other countries… I suspect not everyone at AgileBits is in Toronto) tech!

  • That would be excellent. :) And yes, while AgileBits is a Canadian company (with an office in Toronto), about 50% or more of our workforce is remote from all over the globe.

This discussion has been closed.