Solved

Alert for Weak Password switches to Reused Password when ignored

Forum|Forum|2 years ago
May 14, 2024
6 replies
242 views

I have an Login item that has a Weak Password alert (the password really is weak because
it was assigned and I cannot change it). Since I cannot fix this, I ignored the alert. But when
I look at that item in Watchtower under Ignored Alerts, the alert is now for Reused Password.
Is this a bug or is there something else going on here? I am fairly certain no other items use
that same password and It did not show up under Reused Passwords in Watchtower before I
ignored the alert.

1Password Version: 8.10.32
Extension Version: 2.23.3
OS Version: Linux Mint 21.3
Browser: Firefox

Linux

Best answer by 1P_Gem

Hi @Dave47, thanks for this additional information! It seems you're running into a known bug at the moment, where Watchtower incorrectly displays a reused password banner in the Ignored Alerts section for an item with a weak password.

I'm not yet able to provide a timeline for a fix for this issue, however if you would like, you can keep an eye on our release notes page for news on any bug fixes: 1Password Releases

If you have any further questions or concerns, let us know.

ref: dev/core/core#22996

1

1P_David

1Password Employee

Hi @Dave47,

Thanks for reaching out!

If you you restart 1Password and click to view the Watchtower, then select the Reused passwords tile, are you still not seeing the item listed?

I look forward to hearing from you!

-David

D

Dave47Author

No. I restarted 1Password and clicked on Watchtower. Reused Passwords is empty. And that makes
sense, because I am certain the random weak password I chose is not reused (i.e., no other items
use that same password). But the Weak Password alert I ignored shows up as a Reused Password
alert in the Ignored Alerts. This is easily reproducible.

1P_GemAnswer

1Password Employee

Hi @Dave47, thanks for this additional information! It seems you're running into a known bug at the moment, where Watchtower incorrectly displays a reused password banner in the Ignored Alerts section for an item with a weak password.

I'm not yet able to provide a timeline for a fix for this issue, however if you would like, you can keep an eye on our release notes page for news on any bug fixes: 1Password Releases

If you have any further questions or concerns, let us know.

ref: dev/core/core#22996

D

dkav

@1P_Gem, has there been any update on this bug? It has been around for a while and is still not fixed (08.10.60).

hege

I was just coming to create a bug report about this, but I made a search first just to find out this problem has not been fixed in a year. Well maybe next decade then!

1P_Dave

1Password Employee

@hege

Thank you for the report, I've added it to the internal work item for the issue which is still open in our developer's backlog.

-Dave

M

michelleh

I'm dealing with this too. Why is there no fix to this? In our case, my user is showing up under reused passwords (2) but in reality she only has 1 weak password - that she can't fix.

This is such a waste of time for me as the administrator and there's no way to mark this as false which means for each month, I'll have to go through thinking back on if there's a reason why I shouldn't ask someone to fix stuff. HUGE waste of time and will lead to missed real issues.

1P_Dave

1Password Employee

@michelleh

I'm sorry for the disruption. The issue being discussed in this thread is one where if you ignore a weak password alert Watchtower incorrectly displays a "Reused Password" banner for an item in "Ignored Alerts".

Is this what your user is seeing? Or are they seeing the wrong type of banner being shown for an item that isn't in Ignored Alerts? Can you tell me a little more about the disruption this causes? Are you using 1Password Business and seeing incorrect data in the Business Watchtower report?

-Dave

Sign up

1Password employees: Sign in with SSO

Login to the community

1Password employees: Sign in with SSO

Scanning file for viruses.

This file cannot be downloaded