Password indiscrimently changed [Resolved: website implements unique security measures]

koakford

hi guys, i noticed my password to my internet banking had changed in (1Password Version 5.3 (530029) Mac App Store), i did not change the password. I deleted the saved password and emptyied the trash then logged on to the internet banking site and re-saved the password, when check the file the password saved is different to the one saved when logging on, is there a known issue?

Stephen_C

is there a known issue?

I think not—but there are one or two possible things that could have happened, so please try this to see if we can get to the bottom of the issue.

1. Look in your Passwords category and see if the expected password is anywhere in there. (The Passwords category saves passwords you've generated using 1P and which are not linked to a specific saved login item.)
2. If you look at the relevant login entry in the main app is there an entry towards the bottom under show previously used passwords? Does the password show when you click that?

Depending on your response we may be able to find out what's happened. When you post again please also let us know what browser you're using the the version number of the 1P extension in that browser.

Stephen

Drew_AG

Hi @koakford,

I'm sorry you're having trouble with a Login item! That's a very strange thing to happen, but your data in 1Password won't change unless you do something to change it, so there must be another explanation.

Did Stephen's suggestions help you to find your correct password for the site? If not, I thought of something else you can check: Find that Login item in the main 1Password app and click the "show web form details" button. Do you see your password in there? (If you have passwords concealed, you can hold down the Option key on your keyboard to temporarily reveal them.)

In addition to the information Stephen asked for, would you be able to let us know the URL for the website in question? If we can test it, we might be able to figure out what's happening. Thanks!

koakford

Hi Stephen
1. no the password is not there
2. the password shown is the incorrect one
3. using Safari V8.06 (1.600.6.3) Extension I Password 4.3.1

Drew
1. Have gone though the show Web form details and it also shoed the incorrect password
2. URL https://ibanking.stgeorge.com.au/ibank/loginPage.action

I have since gone in and manually update the password and security number in the WEB form details area, this seems to have worked as the password has not changed since doing this???????

Thanks for your replies it is appreciated
Keith

Drew_AG

Hi @koakford,

Thanks for the information and for the URL! Something strange seems to be happening with the fields on that site, so I did quite a bit of testing to figure out what's going on. I reproduced the problem you described, and to make a long story short, the problem is that the website is changing the password before it is saved in 1Password. In other words, 1Password is saving the exact information it receives from that site, but the site has changed what you typed, so the wrong information is saved. I suspect this might be some sort of feature on that site to prevent password managers or other apps from recording the correct password, but that's just a guess.

The bottom line is that the workaround you mentioned is exactly what you need to do to solve this problem - after saving the Login item for that site, edit that Login to correct the password. In my testing, that site changed both the Security Number and Internet Password fields, so make sure you also check the web form details in your Login item, and make corrections there too, if necessary.

I haven't come across many sites like that, so hopefully this won't be an issue for other Login items. If you need more help or have any questions about that, please let us know - we're here for you! :)

koakford

:)

Megan

Hi @koakford ,

I'm glad that Drew's answer helped you out!

Since this particular issue is resolved, I'll close this thread, but if you have any further questions or concerns, please don't hesitate to open a new thread, or email us directly at support+forum@agilebits.com - we're here for you. :)