Forum Discussion

Authority's avatar
Authority
Occasional Contributor
6 months ago
Solved

Do not offer to save Yubikey Generated OTP

When logging into Delinea Secret Server at work, I am presented with a two step process for logging in. Step 1 is your normal username and password (plus AD domain since it is AD integrated).  1Pass...
browser extension
discussion
  • Authority's avatar
    Authority
    6 months ago

    I was able to solve my immediate issue through the use of a Tampermonkey UserScript.

    const textbox = document.querySelector("#LoginNewUiUserControl1_RadiusPasswordTextBox");
textbox.setAttribute("type" , "text");
textbox.removeAttribute("autocomplete");

    Since the OTP isn't really something that needs to be obscured, I changed the textbox from type=password to type=text and removed the autocomplete attribute entirely.  Now 1Password ignores it, as desired.

Authority's avatar
Authority
Occasional Contributor
6 months ago

This discussion actually seems very relevant to my problem:  Blacklist site for asking to save passwords? | 1Password Community

(It didn't exist when I started writing up my discussion topic yesterday.)

Being able to block an entire domain/subdomain from offering to save passwords would be very helpful when dealing with another web-based secrets manager.