Skip to main content
October 13, 2023
Question

OTP Incorrectly filled in on Paypal

  • October 13, 2023
  • 5 replies
  • 323 views

Hello,

Would anyone be able to reproduce this issue to confirm that it is not isolated to my setup?

Issue

1password browser extension incorrectly fills the OTP on paypal.com.

If the generated OTP is 123456, then the OTP filled in is the first digit of the OTP repeated, so 111111 in this case.

Steps to reproduce

Pre-requisites: You should have a paypal login saved in 1password with OTP added to it.

  1. Head to https://www.paypal.com/signin
  2. Click on the Username field and select the 1password login item. Username gets filled in. Click on Next.
  3. You are redirected to the next screen where the password should already be filled in. Click on 'Login'
  4. Finally, you are redirected to the 'Enter your code' screen where 1password autofills the OTP.

Expected Result

If the generated OTP is, say, 123456, then that is what should be filled in.

Actual Result

The first digit of the OTP is repeated for all 6 characters of the OTP. Thus, 111111 gets filled in.

This happens on a pristine, freshly created, browser profile with NO other extensions installed except 1password.

Homework

I attempted to install, on Firefox, the oldest possible version from https://addons.mozilla.org/en-GB/firefox/addon/1password-x-password-manager/versions/.

I tried a bunch of different versions with the oldest one that was functional being v2.2.2, but it had the same issue.

Snapshots

The generated OTP was 024598, but what was filled in is as follows:


1Password Version: 1Password for Mac 8.10.16 (81016025)
Extension Version: 2.15.1 (21500107, on Stable channel)
OS Version: macOS 12.6.7
Browser: Firefox v118.0.2 (64-bit) and Chrome (Version 117.0.5938.149)

5 replies

October 13, 2023

Further to the above, I have found that, the OTP gets filled in correctly at first but then gets overwritten.

I was able to record a video and slow it down to show this happening:

1P_Tommy
1Password Employee
October 13, 2023

@orland79

Do you have multiple TOTP codes saved to your PayPal entry?

1P_Tommy
1Password Employee
October 13, 2023
October 17, 2023

Great, that sorted it out !! Thank you!!

There were indeed more than one OTPs saved (even though they were the same)

1P_Dave
1Password Employee
October 17, 2023

I'm happy that Tommy was able to help. 🙂

-Dave