virtual keyboard sites not working

Options

sites with a virtual keyboard save ok in 1password but are not accepted by site when selected in 1password


1Password Version: 6.1
Extension Version: Not Provided
OS Version: 10.11
Sync Type: iCloud
Referrer: kb:disable-browser-password-manager, ug:mac/, ug:mac/using-a-saved-login, ug:mac/changing-a-saved-password, kb-search:virtual keyboards

Comments

  • Hi @flraymond,

    Thanks for writing in. We've moved your thread from the Mac forum to the Saving and Filling forum as it's more appropriate there.

    Virtual keyboards pose an interesting challenge for us. Interesting mostly to us... to you this is less interesting cause you're just looking to have this work, and it doesn't.

    The best I can do is to explain how virtual keyboards work, and hopefully it'll explain why you're seeing what you're seeing.

    From your perspective, the virtual keyboard allows you to click on virtual keyboard keys that function sort of like a real keyboard, and it puts the corresponding letters/numbers into a text field just like if you were typing them as a password. When 1Password looks at this form, it sees that password field that looks like a normal password field and it can do the right thing and save a good login item into 1Password.

    When you ask 1Password to login with that item, 1Password attempts to do the reverse of this. It has the password stored in the login item, and it's looking for a good password field to put this password into. It may even find that password field and put it in. The problem is that it's only doing part of the job of what you did originally.

    By typing on the virtual keyboard, you aren't just using a virtual keyboard. It's normal/typical for virtual keyboard password systems to run extra code beyond just entering the letter upon every keypress. So for example they could be running some math on some big numbers every time you press a key on the keyboard while also showing you that letter/number on the screen. As you're typing, it's doing more and more math, until you've entered your password. So what you end up with is your password on the screen, and the result of this mathematical expression that was derived by you clicking different keys on the keyboard. That gives us two pieces: the password on the screen, and the number. They could be sending both the password and the number to their servers for verification, or maybe they're only sending the number. Regardless, there's a component there that 1Password wasn't able to capture... and there's no real good way for us to capture it.

    If we wanted to "solve" this problem, we would most likely have to detect that there's a virtual keyboard on screen, then try to mimic the mouse clicks needed on each key on the virtual keyboard in order to enter your password in such a way that it can do both the password and the math. It turns out that this is harder than it sounds.

    I hope this helps explain what you're seeing.

    Rick

This discussion has been closed.