Skip to main content
Piwi
April 17, 2024
Question

Nonexistent passkey blocks 1PW autofill at PayPal and TOTP filling issues

  • April 17, 2024
  • 14 replies
  • 389 views

I had activated passkeys on PayPal once, but deleted it again because PayPal (like almost all website operators except Synology) does a poor job of implementing passkeys. So I deleted the passkey in both 1Password and PayPal itself. Now only the login via user name and password is available. If I now want to log in to PayPal, my macOS or Safari still shows me the option to log in using a passkey (it's not the 1PW window). This then overrides the automatic filling of the username and password by the 1Password Browser Extension (it then no longer works). This is strange because I have completely disabled autofill and keychain password management in both Safari and macOS. I also deleted the browser cache and the PayPal cookie, but the issue still persists. What could be the reason?


1Password Version: 8.10.30
Extension Version: 2.22.1
OS Version: macOS 13.6.6
Browser: Safari 17.4.1

14 replies

Piwi
PiwiAuthor
April 17, 2024

When I log in to PayPal, 1Password no longer autofills the 2FA code. I now have to inconveniently copy this to the clipboard using the 1PW app and paste it back into PayPal. This applies to both 1PW on the Mac and 1PW on the iPhone.


1Password Version: 8.10.30
Extension Version: 2.22.1
OS Version: macOS 14.4.1
Browser: Safari 17.4.1

r8ders2k
April 17, 2024

Yeah, I have to manually copy and paste in the 2FA from 1Password.

Piwi
PiwiAuthor
April 17, 2024

But this was better before.

1P_Dave
1Password Employee
April 17, 2024

Hello @Piwi and @r8ders2k! 👋

I'm sorry that 1Password in the browser isn't automatically filling your one-time password for PayPal when signing in using a passkey. This is a known issue that is in our developer's backlog and I've let them know that you're both affected as well. When the issue is resolved, you'll see the fix noted in 1Password's release notes:

For the time being, you'll need to manually copy your one-time password from 1Password and paste it into PayPal.

For the iPhone and iPad, 1Password uses the iOS native filling feature to sign into websites and apps using a passkey, this feature doesn't support filling one-time passwords. However you can have 1Password automatically copy your one-time password for an app or website to the clipboard so that you can paste it into the app when filling your login information:

  1. Open and unlock 1Password 8 on your iPhone or iPad.
  2. Tap the icon for your account or collection at the top left and choose Settings.
  3. Tap AutoFill.
  4. Turn on "Copy One-Time Passwords".
  5. Go back to Settings.
  6. Tap Notifications.
  7. Turn on "One-Time Passwords".

Then, sign in to PayPal using your passkey again. You should see a notification that 1Password has copied the one-time password to your clipboard. You can then paste the one-time password into the app: Select, cut, copy, and paste text on iPhone - Apple Support (CA)

I hope that helps.

-Dave

ref: dev/core/core#24349

Piwi
PiwiAuthor
April 17, 2024

Hello @1P_Dave,
thank you for your quick response. But this doesn't have anything to do with passkeys. I haven't set up any passkeys for PayPal and only use the login via username/password and 2FA code. And this doesn't work on both Mac and iPhone (PayPal app) – even though I had already made the settings as you described.

1P_Dave
1Password Employee
April 17, 2024

@Piwi

My apologies, I read that you had been using a passkey for PayPal in your other thread and missed the part where you said that you had stopped using a passkey.

Let's focus on Safari on the Mac first and then we can take a look at the iOS issue later. When I sign in to PayPal.com using Safari on my Mac and using my email address and password I follow these steps:

  1. Go to https://www.paypal.com/signin
  2. Click on the Email or mobile number field.
  3. Click on your suggested login from 1Password that appears below the field.
  4. Click Log In.

On the next "Enter your code" page, 1Password automatically fills the one-time password. When you follow these specific steps are you seeing different behaviour? If you're using different steps then could you list them here so that I can reproduce the issue?

I look forward to hearing from you.

-Dave

Piwi
PiwiAuthor
April 17, 2024

@1P_Dave,

that's exactly the way I do it – and it does not autofill the 2FA. Interesting, because this works on one mac, but not on the other …

1P_Dave
1Password Employee
April 18, 2024

@Piwi

The fact that 1Password is filling the one-time password in Safari on one of your Macs but not the other suggests that there's some difference between the two devices. Are you using any extensions in Safari on the Mac that isn't working that you aren't using on the Mac where TOTP filling is working?

If you create a new Safari profile on the Mac that isn't working, does 1Password fill the TOTP in that profile? You can find instructions of Safari profiles here: Use profiles in Safari on Mac - Apple Support (CA)

I look forward to hearing from you.

-Dave

Piwi
PiwiAuthor
April 19, 2024

@1P_Dave,

For sure, but there are no differences in prefs – and there are no other extensions installed. Interesting, because the issue only happens with PayPal – in every other case TOTP works perfectly.

Maybe it has something to do with the strange Passkeys behavior of PayPal (please see my other discussion). I would suggest to look at this 1st, because I could imagine the TOTP issue disappears then, too. So let me simply summarize it here again: Why do I get the 1Pw Passkeys window shown when I log in to PayPal ("Login with Passkey"). Strange, because I don't use a passkey for PayPal (deleted in both PayPal and 1Pw). I already deleted browser cache and PayPal cookies.


In the meantime, I found out why the iPhone PayPal app doesn't fill out the TOTP (not even via the clipboard): I activated login via Face ID in PayPal. After the automatic login, the TOTP will be queried. However, 1Pw had NOT previously entered the username and password - and therefore apparently does not understand the TOTP query. If I switch off the login via Face ID in the PayPal app, then it works. In any case, it's not particularly practical.

1P_Dave
1Password Employee
April 19, 2024

@Piwi

Thanks for the reply. I've merged your threads together so that we can keep the conversation in the same place. So that I can better understand the situation can you post the following:

  1. A screenshot of the passkeys prompt that you see when signing into PayPal in Safari on your Mac.
  2. Confirmation whether you see the same behaviour in a new Safari profile.

These two pieces of information will help me to understand the situation and work on a solution.

In the meantime, I found out why the iPhone PayPal app doesn't fill out the TOTP (not even via the clipboard): I activated login via Face ID in PayPal. After the automatic login, the TOTP will be queried. However, 1Pw had NOT previously entered the username and password - and therefore apparently does not understand the TOTP query. If I switch off the login via Face ID in the PayPal app, then it works. In any case, it's not particularly practical.

Thanks for sharing your findings. You're correct that if you don't use iOS AutoFill to first fill your username/password then the one-time password won't be copied to your clipboard. iOS AutoFill isn't capable of filling your one-time passwords from 1Password automatically. See my previous post for more details on how one-time passwords are handled on iOS.

I'm not aware of another app out there that uses Face ID to open the app but also still requests a one-time password after that. I would recommend sending feedback to PayPal about this behaviour.

I look forward to hearing from you. 🙂

-Dave