Can't gain access from Password to pay a bill
Hi, I've set up to access websites to pay bills via 1Password. Has been working fine. Went to pay a gas bill today and my access was rejected. Checked user name and password were correct. Still rejected. So went to the gas company log in page directly, entered password and had no problems. Once on the site I changed my password, logged out and when I went to sign in directly again, 1Password asked me if I wanted to save the access information. I saved to 1Password but when I then tried to access the web site from 1Password I was again rejected and told either user name or password were incorrect.
Clearly that can't be the case since they were automatically stored and I again checked to make sure they were correct. Have you any idea what's going on?
By the way I checked a couple of other websites using 1Password and every thing was fine.
1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided
Sync Type: Not Provided
Comments
-
Usually results such as you describe means there has been a change on the website in how it handles information. Most often, this is solved by Saving a Login Manually. Give that a try and let us know how it goes. If that doesn't solve the problem with the site, can you post the URL for the site? If you can (don't if it reveals private information), the support team may be able to help understand the problem.
0 -
I had already manual entry but tried again. Same result - message saying "authentication has failed". But, having entered that information on the payment website, I again had no problem logging in directly. The URL is for payment, in this case of a gas bill. I don't see how posting that is an issue, but will it help resolve the problem?
0 -
@GranPete - I regularly use a web site that has an undisclosed maximum number of allowable characters for its passwords. Let's see if this applies to you.
At this site, I can create as long a password as I want in 1Password and it appears to fill and confirm correctly. But when I return to log in again, I am rejected, if I let 1Password fill and submit my credentials. However, I can successfully log in when I manually enter my credentials, which seem identical to what 1Password has saved. This sounds very similar to your situation, if not identical.
What I learned by trial and error is that this web site is truncating the new password to that maximum allowable character length and saving the truncated version. 1Password faithfully saves the full password, untruncated. When I return and ask 1Password to submit my credentials automatically, the site doesn't truncate the password that is submitted, which then doesn't match the truncated version the site saved. I get rejected. But, if I manually type in the password, the site stops recording my keystrokes when I reach the maximum allowable length, so when I click the submit button, the typed password now matches what the site is remembering, and I am able to get in. I can continue to type all the characters in the saved password, but the site isn't recording any characters once the maximum length is reached.
Could this apply to you? You might try shortening your password to see. In my case, I deduced the undisclosed maximum allowable length by counting the asterisks in the password box until they stopped increasing when I manually entered my password to log in. I then created a password of that length in 1Password, and everything started to work properly again.
Don't even ask me what I think of the site's policy that shortens the password length a user may create, and to make matters even worse, doesn't let users know what the rules are. Aggravating, to be sure.
There isn't any guarantee this is your issue, but it sounds so similar to my experience that I thought it worth recording.
Are you at liberty to disclose the site that is giving you these trouble? In my case, it is USAA.
0 -
Hi @GranPete,
It sounds like this problem is specific to a certain website or form, so if you can let us know the URL, we'll try testing that ourselves to see if we can figure out what's happening.
Also, I'm wondering exactly what information you're trying to fill on what site - are you trying to fill your gas company login credentials on the gas company website? Or are you trying to enter bank or credit card information somewhere to set up your billing? If I understand, you're just trying to have 1Password log you into the gas company website, but wanted to ask about that in case I misunderstood. Thanks!
0 -
Hawkmoth. Thanks but that doesn't seem to be the problem. The site specifies a password "of 8 characters or more" with no apparent limit. Mine is 11 and when I enter manually there are indeed 11 dots.
Drew, this is a web site used by my gas company for bill payment. I have all the relevant bank account information stored there so that I simply log in, check the bill and click "ok to pay". And yes, I'm using iPassword to log into all my bill paying websites, in particular, for when we are on extended overseas trips.
The site URL is https://secure4.billerweb.com/ppg/inetSrv
0 -
Just to double check per Hawkmoth's suggestion, I changed the password to 8 characters. No luck, still can't log in via 1Password
0 -
Was able to make contact with a representative at the gas company billing operation. She did some checking for me and said that the billing company blocks access from operations such as iPassword. They only allow manual entry of passwords. Have you come across this before? I doubt they are unique and if this is common practice it does somewhat reduce the usefulness of iPassword..
0 -
There are several reports here in the forums of banks doing just what your gas company is doing. These sites think they are improving security, when instead they are compromising it.
There is no guarantee this will work, but there is a bookmarklet available that overrides blocking of pasting into such sites. It won't help with automatic fill and submit, but it might allow you to copy from 1Password and paste into the site. I have not used this myself, but you may want to give it a go. You can read about it and how to use it here.
0 -
Unfortunately we can't even check the site out as you have to be redirected from the correct place it seems. I find such beliefs idiotic. Nobody in their right mind is going to pick a horribly long and complex password if they know they have to type the damn thing out. It's incredibly short-sighted if you ask me. All we can do is try and persuade people though that there are better approaches*
Banks typically have some pretty whacky security ideas but there's hope - An open letter to banks. If a bank believes it can do this and keep you safe then others should be able to reach to reach the same decision too :smile:
- possibly aided by not using words like idiotic or short-sighted admittedly.
0 -
Now found another web site that apparently doesn't allow access from 1Password - hertz.com. I'm still adding web sites but so far, this is 2 out of 20. If 10% is the norm it does reduce the value of 1Password somewhat.
0 -
Interesting. I double checked that my Hertz password is correct in 1Password, and 1Password indeed autofills on the Hertz web site. But once again, when I then clicked "log in" I get a message saying the information is incorrect. However, this time I deleted the information, tried 1Password once more and the autofill was accepted.
I repeated this and exactly the same thing happened. First autofill rejected, second worked.0 -
It seems I'm all sorts of useless here @GranPete. I went to join up so I could test but they require a driving licence, something I don't actually possess.
One thing I did find in my testing or flailing around was that there exists the following page which I was redirected to when my login attempt unsurprisingly failed.
https://www.hertz.com/rentacar/member/login?curPage=input
I'm wondering, if you create a Login item based on that page, does it work any more reliably if you were to use open and fill. The open and fill is when you click on a URL either in the main 1Password main window or select a Login item in 1Password mini which doesn't match the URL for the active tab in your browser. To better explain. Say my active tab is our forums and I open 1Password mini and select my Amazon Login item. It will open a new tab using the primary URL stored in that Login item before attempting to then fill.
It might be that doesn't behave any better. Unfortunately it is very much a guess given my inability to create an account there. It is probably worth a shot though and we'd love to hear if it helps (or doesn't).
0 -
I've tried creating a Login based on that page but I'm consistently getting the same problem. Each time I try to log in from 1Password I'm rejected on the first attempt. I clear User ID and Password, attempt the log in again from 1Password and it's successful. I guess getting in at the second attempt is better than nothing.
0 -
Have you tried Saving a Login Manually? Just checking. This often works for me because it is better at recording web page details than just entering the username and password in a new record.
0 -
Hi @GranPete,
I hope manually saving a new Login helps with your Hertz.com login, but if it's still a problem, it will help if you can let us know a few more details about your setup:
- What exact version of Mac OS X are you running?
- What exact version of the 1Password app is installed? (From the main 1Password app, go to the menu for 1Password > About 1Password)
- Are you using the AgileBits Store version or the Mac App Store version of 1Password?
- What web browser are you using, and what version?
- What version of the 1Password extension is installed in your browser?
Thanks!
0 -
It's the latest version of Mac OS X 10.10.3. I have version 5.3.1 of 1Password, store version. Using Safari 8.0.6 I don't think I installed the extension - what does it do? Not sure I want to spend any more time on this.
0 -
Hi @GranPete,
The 1Password browser extension allows 1Password to fill data in websites. From the Safari app, go to Safari > Preferences, then click the Extensions tab. Do you see the 1Password extension listed there? If so, what version is it? The latest stable version of the 1Password extension is 4.3.1.
If you don't have the 1Password extension installed, you'll need to install it:
- Open the following link in Safari: https://agilebits.com/onepassword/extensions
- Click the big green Install button and follow any additional steps
If the latest extension is installed in Safari but you're still having trouble logging into Hertz.com, please follow these steps to manually save a new Login item (I'm not sure if you've already tried this):
- Go to https://www.hertz.com/ (you should be redirected to https://www.hertz.com/rentacar/reservation/ ).
- Click the "Login" button near the top right area of that site.
- Enter your Member Number/User ID and your Password in the pop-up window that appears, but do not submit the form.
- Click the 1Password extension/mini icon in the browser or menu bar.
- Click the 'gear' icon (to the right of the Search field), then select Save new Login from the menu that pops up.
- Change the title so you can easily tell the new Login apart from the old one.
- Click the Save button.
- Refresh the website, click the "Login" button again, then try to have 1Password fill your info using the new Login item you just created.
I tried those exact steps and 1Password is filling the form correctly for me, so I'm sure we can get this to work for you, too. Please let us know how it all goes, thanks!
0 -
I did have Extensions, latest version. The steps you proposed are ones I had already taken but went through them again and this time got access first time with no problem. Perhaps I did something differently but no idea what. Thanks for your help.
0 -
Hi @GranPete,
Well it's been a bit of a fight but at least it seems to have resulted in a working Login item, even if it isn't entirely clear what changed. If you have any other questions or issues you know where to find us. Hopefully though it will all work as it should :smile:
0
