Filling a Login overwrites previously entered form data [RESOLVED]

alamarco

I just started testing Chrome and noticed an issue with 1Password. If no username is given in 1Password, 1Password for Chrome will delete what ever you have typed for the username when pasting in the password.



Example: For banking I only store my password and not my card number. When I go to my banks website I enter in my card number and use Ctrl + \ to auto fill in my password. This works perfectly in Firefox 8, but when using Chrome, the card number is removed when 1Password auto fills in the password. This happens with any site that is not supplied a username in 1Password.



I've tried two methods. The first, which works with Firefox 8, is to not have a username field. By this, I mean that I have deleted the username field in 1Password such that only the password exists. The second is to have a blank username field. In either case, the username in Chrome is removed.



Is there some method of configuration to get Chrome to work properly or is this a bug with how 1Password is operating?

DBrown

Welcome to the forum, alamarco!



You don't say how you saved the Login item (from within a browser, using one of the extensions) or from within 1Password itself; and you don't cite a URL where we can see exactly what's going on.



In general, though, 1Password should fill a form with the values you saved for the form. If you saved a username field with an empty string as the value, then the empty string is what 1Password should put into the username field when you press Ctrl+\ to fill the form. In that light, it would make perfect sense that deleting the username field would prevent 1Password from filling the username field with [i]any[/i] value—essentially leaving intact whatever you typed into that field by hand—because 1Password wouldn't "know" anything about the username field.



I can't say why the extensions for Chrome and Firefox behave differently, except to point out that they're different pieces of software with different underlying technologies. Again, we'd need more details to be more specific.



It's worth noting that there's no reason [i]not[/i] to store your username (or card number, in this case) in 1Password, along with your password. Your 1Password data is protected by your master password, and the beauty of 1Password is that it saves you [i]having[/i] to remember long passwords, credit card numbers, and all the other things that take our brain cells away from more pleasurable pursuits. <img src='http://forum.agilebits.com/public/style_emoticons/<#EMO_DIR#>/smile.png' class='bbc_emoticon' alt=':)' />



I hope you'll consider trusting 1Password—as many thousands of users do, every day—to do its job and make your life a little easier.



Thanks for using 1Password!

alamarco

I do not store the card number because I don't see the point of storing the card number. While I trust 1Password and have been using it for the past few years, part of security is to cover yourself. By separating my card number and my password it becomes harder for someone to gain access to it. While I do keep regular logins fully stored with usernames and passwords, I take extra steps with my financial details.



The site I'm currently having issues with would be PC Financial, located at https://www.txn.banking.pcfinancial.ca/ . Currently my only field in 1Password for PC Financial is my password. The username field has been deleted and as you mentioned, in Firefox this does not delete the username and just fills in the password. In Chrome, the username is deleted when auto-filling in the password.



All my passwords have been created manually, not with a browser extension. I believe that is all the information you've asked for. If you need any more information please let me know.



Thanks for the help thus far. <img src='http://forum.agilebits.com/public/style_emoticons/<#EMO_DIR#>/smile.png' class='bbc_emoticon' alt=':)' />

DBrown

Well, you will use the tool as you see fit; but your credit card number is as safe in 1Password as your username and password. Please note that we encourage you (quite explicitly, in 1Password) to create Login items from within the 1Password extension—they're almost certain to work better than any you create by hand from within 1Password itself. You might try creating a new Login item for that site in the recommended manner.



1Password also includes Wallet items like Credit Cards. I keep my own there, as do most 1Password users. I urge you to look into that feature. The convenience is addictive! <img src='http://forum.agilebits.com/public/style_emoticons/<#EMO_DIR#>/smile.png' class='bbc_emoticon' alt=':)' />



In the meantime, I'll see if there's anything I can identify at the URL you mentioned.



Thanks!

DBrown

So, this behavior appears related to our switch to new browser extension technology.



The extensions for Chrome and Safari use the new technology. On this page, pressing Ctrl+\ clears the username field (your credit card number) as it fills in the password field. You can simply press Ctrl+\ first, then fill in the username field and submit the form (you may need to set the Submit option to Never, so that 1Password doesn't auto-submit the form as soon as you press Ctrl+\).



The extensions for Internet Explorer and Firefox use the old technology. They do not clear the username field...although, as I stated above, it would be reasonable for them to do so, if the username field were actually present and defined in 1Password as containing an empty string. (I realize that's not the case, here. Chrome and Safari clear the username field, even if that field has been deleted from the Login definition.)



Your alternatives, for now, seem to be:

[list]

[*]Using Internet Explorer or Firefox to visit this site with your existing Login item.

[*]Pressing Ctrl+\ to fill the password [i]before[/i] typing the credit card number and submitting the form.

[*]Creating a Login item in the recommended method, to see if you get a more successful result. [color=magenta][i]Worth a try![/i][/color]

[*]Create a Login item that includes all the data you need to fill at that URL, as 1Password is designed to be used. [color=magenta][i]Highly recommended![/i][/color]

[/list]

Do let us know how it goes, alamarco!

alamarco

Is it possible to submit this as a bug and/or feature request? If Firefox uses the old technology I assume it'll eventually get updated to the new technology. If that's the case Firefox will eventually stop working as well.



I tested creating a login using the browser (does the same thing as doing it manually) and it did not work and produced the same results.



For now, I'll set Submit to Never for this specific site and hope this eventually gets resolved.

DBrown

Consider it submitted, alamarco! <img src='http://forum.agilebits.com/public/style_emoticons/<#EMO_DIR#>/smile.png' class='bbc_emoticon' alt=':)' />



Thanks for your patience.

alamarco

Thanks for your help. <img src='http://forum.agilebits.com/public/style_emoticons/<#EMO_DIR#>/smile.png' class='bbc_emoticon' alt=':)' />

alamarco

Little disappointed this was not fixed before the Firefox update was pushed out. Leaves a sour taste in my mouth considering it has been months since this has been known and submitted.



Now Firefox works just like Chrome and does not work properly. I don't get why this isn't fixed. Why clear the username field if nothing is entered? While I don't the programming behind 1Password I do know simple checks could easily solve this problem being a programmer. Does the field exist? No, then don't anything to it. If field exists and is blank, do nothing... etc.



Again, there's obviously more to it than that, but with 3 months of knowing about this issue and still pushing out the update, defintely is disappointing.

khad

1Password will fill the fields in the form with the information you have stored in the Login item. If the field is blank, the extension will fill that. As mentioned above, you'll need to either fill the Login before manually entering information into the form, or just save a Login item with the complete information like this:



1. Navigate to [url="https://www.txn.banking.pcfinancial.ca/a/authentication/preSignOn.ams?tpcfa=set"]https://www.txn.bank...n.ams?tpcfa=set[/url]

2. Enter your card number and password but DO NOT submit the form.

3. Click the 1Password button in your browser's toolbar, and select the "+" button in the upper right hand corner.

4. Change the title and make any notes (if desired).

5. Click the Save button in the upper right hand corner.



That will save a Login with the complete information, so all you need to do is press CTRL+\ to log into the site without trouble. <img src='http://forum.agilebits.com/public/style_emoticons/<#EMO_DIR#>/smile.png' class='bbc_emoticon' alt=':)' />

khad

You can also just [b]remove the blank field[/b] from the Login item and 1Password won't "fill" it.



[img]https://img.skitch.com/20120315-k2s82dwbqd4y8s12cqdidk1fcq.png[/img]

alamarco

My current setup is only having the password. There is no blank username only a "password" field. 1Password still blanks the username in this situation. The reason I mentioned both blank and not existing is that those are basic checks when dealing with data and safe guarding crashes, bugs, etc.



Like previously mentioned, part of security is not placing all your eggs in one basket. There's absolutely no reason to store your credit card number and while other users may do so, it should not be necessary. If someone were to come across an open 1Password database or know the 1Password database, with the credit card number in the database they'd have free reign over ones finances.

khad

I am not able to reproduce the issue. I am able to successfully fill [i]just the password[/i] without the card number field being overwritten, cleared, or otherwise modified in any way.



http://screencast.com/t/XmLaKVsr0



What version of 1Password, browser, and extension are you using?

alamarco

Thanks for the last response. Knowing it works for you made me dig deeper. I don't know what specifically the issue was, but I did the following at it works now.



1) Uninstalled 1Password completely including removing extension from browser

2) Installed 1Password and installed browser extension

3) Re-created the entry in 1Password

khad

The prize was behind door number 3. <img src='http://forum.agilebits.com/public/style_emoticons/<#EMO_DIR#>/smile.png' class='bbc_emoticon' alt=':)' />



I'm glad it is working well for you. Thanks for updating the thread to let me know. I hope you have a great weekend.



Cheers,