Website Won't Accept 1Password-provided Credentials
Running Chrome 56.0.2924.59 beta as my browser or Firefox 50.1.0. When I visit http://mymerrill.com and use my Chrome 1Password to supply my account password, the response is a panel reporting that the password fails security criteria (e.g. length not in the range 8 - 20 with at least one uppercase character and one numeric). However, my password is within this range with mixed case plus numerics - and when I type in exactly the same password manually, it is accepted. I've verified that the password in the 1Password website account record is the same as the one I supply manually. I've not seen this with other websites in my account list. The symptom is the same in Chrome and Firefox. What can cause this?
1Password Version: 6.6.BETA-4
Extension Version: 4.6.2.90
OS Version: 10.12.2
Sync Type: DropBox
Comments
-
Using Chrome 56.0.2924.59 or Firefox 50.1.0 as the browser...
When I visit http://mymerrill.com, credentials supplied by 1Password are rejected with a security criteria failure (i.e. overall length failure, failure to use specified character choices). Yet my password =does= comply with the site's stated security criteria and accepts my password without complaint when entered from the keyboard. I have confirmed that my password in the 1Password record is correct. Same issue occurs with two browsers. Never had this experience with any other website. What could cause this?1Password Version: 6.6.BETA
Extension Version: 4.6.2.90
OS Version: 10.12.2
Sync Type: DropBox0 -
Hi @williambloom,
Before we can fill a page we need to learn what fields are present. What I can say is the collection phase of filling seems to trigger a reaction from the site so I can get the message about the password to appear without interacting with the password field at all. It's frustrating because to work with a number of sites out there we do need to prod the various fields on the page - it's the only way to learn enough to properly fill sometimes.
Now when on the main page the message completely obscures the fields making it hard to do much of anything so I wonder, if you instead visit https://olui2.fs.ml.com/mlogin/Login.aspx and try to log in what happens? You will still see the message about the password but both fields should fill. What I cannot sadly test is what happens next. I don't have an account with Merrill Lynch, I'm not even in the right country to create one so if there is still an issue with submitting the login form I wouldn't be able to tell - it will always fail for me as I'm using dummy data.
When I compare the page where I type data into the fields and let 1Password fill the results appear to be the same. In theory I would hope it means you can be logged in even though you get the warning about the password but I have no way to know this for sure. So I will be interested in what you say happens.
You should find 1Password offers you your Merrill Lynch Login item to fill on this page because it's the page the homepage loads inside of an IFrame. You're never really filling the https://www.mymerrill.com/ml/home.aspx page, it's always into the one on olui2.fs.ml.com.
0
