Feedback: Universal sign-in, a new Autofill Experience

I’m using Chrome, and the latest extension update (8.12.37.1) seems to have made this situation even worse.

I tried the new “universal” experience for a day or two when it was first released, then disabled it, and things were fine. But since Friday, I’m not getting prompted to sign in with a passkey to my company SSO (IBM w3 ID) at least 9 out of 10 times I try. When I do get prompted, it’s using the new UI.

I've opened a support ticket (780022), but I had not succeeded at getting a passkey prompt at that point, so the connection to the universal experience was not as clear. I only found this post afterwards, so I thought I’d add my two cents here, as well.

On the larger topic, I really agree with shigeomix’s thoughtful comment. I can see why a Product Manager would ask for a simpler user experience that “just works,” but I think there are difficult trade-offs that should have been considered carefully, and they were not.

We have all been dealing with login forms for decades. We’re very comfortable with the experience. It is jarring to steal focus and pop up a UI element in an unexpected place. We know that this is an imperfect process based on common patterns and heuristics, not a deterministic protocol, so it’s scary to lose control.

If you want to hide the familiar experience and replace it with a single click, you’d better be sure you’re nailing it 100% of the time. You released this feature, enabled by default, without even being anywhere close. This experience is broken on multi-page logins, it’s worse than the old one when you have many logins for a single site, it pops up seemingly at random when you’re already logged in on some sites. And now the old experience is broken for passkeys, too.

For a company that depends on the trust of users to manage their most sensitive data, this is not a good look.

The new autofill experience is full of bugs and obnoxious to use.

• Use the new autofill experience for sign in option does not revert to the old experience
  • This did work for a bit right after release but no longer works at all
• Passkeys are prompting for Mac device password despite disable Ask before filling for identities
  • Filling passkeys does not obey any options such as Unlock using Touch ID, Mac password (disabled, still asking for Mac password), or Apple Watch (enabled, still asking for password)
  • Filling passkeys regularly prompts for Mac password regardless of require account password length.
  • Sometimes cancelling the Mac password prompt lets the passkey work anyway; other times it causes the passkey to fail
  • I should not have to enter my device password to use a passkey if 1Password is unlocked already.
• The form fill no longer prioritizes favorites and frequently defaults to a non-favorite when two credentials exist for the same site
• The credential form fill erroneously pops up on far more sites with no visible forms or non-credential forms.
• The 1password selection menu overlay on the username and password fields is collapsed by default with no option to always show. Sometimes I have dozens of passwords for a site. The new form fill is far more difficult to use taking more clicks for no benefit.

1Password in Edge: 8.12.34.34 Stable Channel (closed and reopened Edge, no change)

1Password for Mac: 8.12.36 Production Channel (no updates available, closed and reopened, no change)

This new autofill functionality and UX appeared without any explanation or documentation that I can locate. I did not enable the “new autofill experience”, and I’d love to get off the ride. Why can’t non-business users also have the “Classic” experience option?

The new sign-in presentation significantly reduces functionality and UX quality. It is too far from the sign-in input fields on a large display, the “Autofocus 1Password sign-in prompts when they appear” option does not work (typically a double-tab or click is required), the options are not displayed without a down arrow after obtaining focus on the 1Password pop-up, the options order isn’t similar to the previous behavior.

The macOS autofill functionality with 1Password as the credential provider (what you get when the new “experience” is disabled,  is not better and requires unlocking for every user, regardless of the 1Password security settings.

I get that obtaining new users is the focus of all development, but please try not to break the habits of your existing users:

• Don’t change default behaviors for existing installations.
• If you have to significantly change the UI, like the ultimately basic function of using credentials, have a really good reason, and explain it to existing users with a video BEFORE you change it.

I turned it off not because I don’t like it, but because I don’t want to see any UI from 1Password. I just want to hit ⌘\ on an unmodified page. I’ve always turned off the visual noise that would appear in username/password fields and now I’ve turned off this new feature as well. Not because it’s bad, I just don’t need a visual overlay for something I have a keyboard shortcut for,

The exception would be when there’s a passkey available. There’s no getting around a prompt in that situation.

Some of the issues I’ve run into are nuisance problems, such as the “complete sign-in” box appearing over the top of several sites like the Google admin console.  But the one that is driving me absolutely crazy has been mentioned up the thread but I want to reiterate it as hopefully it is an easy fix:

I have a whole bunch of servers sitting in various URLs with admin portals, so I’ll have xxxxx.mydomain.com and yyyy.mydomain.com, previously the default behavior in the autofill at the user page seemed to look at the entire URL, so if I was at yyyy.mydomain.com it’d default to that credential.  The new UI seems to only look at mydomain.com so its default choice is frequently incorrect.  I have to either cancel the little pill popup and go to the user entry to use the correct (legacy behavior) autofill, or I have to go to the somewhat clunky dropdown on the pill popup.

The issue where it was appearing on pages even when signed in was happening on our site.

We tracked it down to a “Connect with us on Twitter” link causing a false positive. Probably because it looks like a sign in link.

This is enough to trigger it:

<a>Twitter Connect with z</a>

Adding data-1p-ignore to the element prevents the dialog.

<a data-1p-ignore>Twitter Connect with z</a>

So, I’m seeing this Universal Sign-in behavior on multiple of my computers, but only in Edge or Safari.  Firefox does not show this - is that expected?

I too am having issues with this. My experience is that I have already logged into the website, but it randomly pops up a prompt to login at the top in the middle of the page and doesn’t go away on its own. This is rather annoying. 

Extension Version: 8.12.37.1

Hi, this seems like it has been answered in different issues but it didn’t help with my issue, I think because the latest version is so different.  

Currently, with the new version, I often get the fancy login popup appearing on sites that I am already logged in as. It seems like it offers to log in with a small wording below the popup that says other options. 

This shouldn’t appear as I am already logged in. In my settings, there isn’t the various OFFER options like before, there is just SHOW FILLING or SHOW PASSKEY. I do want both those options, just not when I am already logged in. 

I’m on MacOS Tahoe 26.6 

1Password for Mac 8.12.36

81236040, on PRODUCTION channel

I came here to leave a similar feedback and this already open item pretty much sums up everything I was thinking.

My biggest gripe is that the autofill has become so slow that it actually makes me think for a second or two that 1password is NOT WORKING. Then the thing floats down from above → forcing me to move my mouse to some other region of the screen other than where it already was in the login box. And then by the time I do that suddenly the classic autofill picker magically appears in the place I expect it to be.

The new way is garbage. Terrible. This is like “New Coke”. No one asked for this. And it is not better.