Question

Accounts where TOTP code should be appended (or prepended) to the password

Forum|Forum|4 years ago
April 30, 2022
63 replies
2444 views

This may be a bit of a corner case request, but here goes...

There are some websites (looking at Etrade.com!) where the 2FA TOTP code needs to be silently appended to the password in the same field. There is no visual indication to remind you that a 2FA code is required, and if you forget it just tells you you entered the password wrong[1].

Another example is the login page to opnsense (and maybe pfsense?) router/firewall software. You can enable 2FA on your router, but then have to remember to concatenate the TOTP code just like on etrade.

It would be nice if I could edit or otherwise flag that login item so 1Password knows to automatically concatenate the password and the 2FA code for me so I don't forget.

[1] Admittedly, there's a "use security code" checkbox that reveals a 2FA field, but if you've remembered to check that box, you've remembered you need a 2FA code, so that's not really the issue

1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided

Browser Extension

Show previous replies

1P_Dave

1Password Employee

@Bhellx

Thanks for following up. The feature request is still open with our product team but I don't have any news to share. Hopefully this is a use case that can be better accommodated in the future.

-Dave

ref: PB-43137543

M

melorama

Bringing back this thread from the dead…I just experienced another case on iOS where none of these workaround work. I recently deployed PiKVM units to assist with system administration tasks, and want to use its built in VNC server to connect to the KVM on my iOS devices. I’m using the “bNVC Pro” client, which is recommended by the PiKVM maintainers, and in order to authenticate to the VNC server when you have 2FA enabled, you need to append the TOTP to the account password when logging in via VNC.

Turns out you can’t do this easily using 1Password on iOS, because as an app, the authentication autofill process doesn’t seem to behave in the same way that it does in Safari. I still have to manually copy and paste the password and OTP separately, which is incredibly difficult to do.

Please give serious consideration to adding the “dynamic password” functionality which I posted a mockup of in this thread 3 years ago. It wouldn’t be surprising if many people disable OTPs on their accounts because it’s such pain to handle these types of situations on mobile devices.

1P_Dave

1Password Employee

@melorama

Thank you for the feedback! Your request has been shared with our product team. 🙂

It wouldn’t be surprising if many people disable OTPs on their accounts because it’s such pain to handle these types of situations on mobile devices.

The number of services that require you to enter the password and the one-time password (OTP) into the same field appears to be very small. Most services will have separate fields for the password and the one-time password. That being said, I can definitely see how autofill could be improved for these situations.

-Dave

PB-50885375

M

melorama

For anyone interested, I figured out a way to do the automatic TOTP+Password concatenation with autofilling on Safari for iOS, using 1Password's own self-hosted "1Password Connect" server and iOS Shortcuts. It's a bit nerdy, but if you're the kind of person who runs OPNsense as your router/firewall, it shouldnt difficult at all for you to implement this on your own!

https://www.youtube.com/watch?v=6tUHvlgZY8c

1P_Timothy

Community Manager

Thanks for sharing that @melorama, that was a great demo. Very cool to see what you're doing with Connect.

Sign up

1Password employees: Sign in with SSO

Login to the community

1Password employees: Sign in with SSO

Scanning file for viruses.

This file cannot be downloaded