username being stored with * sequence

Rich99

On some financial websites, Citi for example, when you enter the username the site replaces the name with an obfuscated name (t*****e). 1Password (v6.2) then stores this name as the username rather than what was typed. I don't know if it is possible for 1P to recognize this and avoid it or not.

---

1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided
Sync Type: Not Provided

littlebobbytables

Hello @Rich99,

It's very dependent on the site. We've found a way to determine the real username on at least the citi website and this should work in version 6.2 as I've just tested it myself. It does require an up to date version of the 1Password extension though. What browser are you using and what version of the 1Password Browser Extension is installed?

Rich99

I'm using Firefox 45.0.1with the 1Password extension labelled as 4.5.5, last updated Mar 18

littlebobbytables

Greetings @Rich99,

Well that blows that theory out of the water then. So the test I performed yesterday was on the URL https://online.citi.com/US/JSO/signon/LocaleUsernameSignon.do?locale=en_US which I arrived at when I said I wanted to sign into my bank account on their main page. It might be they do things differently on another page. If you're finding creating a new Login item still records the username with the asterisks and this seems to be easily reproducible we'd love to know the URL of the page and how you get there from their home page. They seem to have a number of login pages so maybe they're doing something unusual on some and we hadn't realised.

Rich99

Thanks @littlebobbytables, the site I'm using is https://www.citi.com/credit-cards/citi.action . If I go to that site and put in a test user name and a bogus password then 1Password will ask me to save the login. Doing so saves the username with asterisks.

littlebobbytables

Greetings @Rich99,

Thank you for the URL :smile: That one doesn't work in the stable version of 1Password for Mac as you've observed but I can happily say we've improved on this and in the beta version of 1Password for Mac we can properly see the real username and record it. I don't know when this beta will eventually turn into a stable release but when it does we'll work properly for that page. So the good news is at some point we will be able to do better there.

Rich99

Thanks for the info @littlebobbytables that will be nice to have when it is available.

AGAlumB

I'm glad lil bobby replied, as I've been using the betas for so long I'd forgotten that this isn't in the stable version yet. You're free to use the beta too, or simply wait for the next stable release. Either way, be sure to let me know if you have any further issues with it after that. It's been on my radar, and looks good so far in testing. :)