This may be a bit of a corner case request, but here goes... There are some websites (looking at Etrade.com!) where the 2FA TOTP code needs to be silently appended to the password in the same field. There is no visual indication to remind you that a 2FA code is required, and if you forget it just tells you you entered the password wrong[1]. Another example is the login page to opnsense (and maybe pfsense?) router/firewall software. You can enable 2FA on your router, but then have to remember to concatenate the TOTP code just like on etrade. It would be nice if I could edit or otherwise flag that login item so 1Password knows to automatically concatenate the password and the 2FA code for me so I don't forget. [1] Admittedly, there's a "use security code" checkbox that reveals a 2FA field, but if you've remembered to check that box, you've remembered you need a 2FA code, so that's not really the issue 1Password Version: Not Provided Extension Version: Not Provided OS Version: Not Provided

Adding my support to this as well. I dont think this is a "special case" feature at all. I have several sites that I use daily where I find the lack of 1Password field concatenation really annoying (USAA and my OPNsense router admin page are two that immediately come to mind). Its not 1PW's fault of course, as this is a really silly hack method to not have the OTP code as a secondary input field on these login pages, but the reality is, there are sites that insist on doing it this way, and it's a real pain to not be able to auto-fill credentials this way via 1PW. I saw a 1PW team member mention (in one of the numerous previous--and now closed--threads about this feature request) that implementing this feature poses a UX challenge, which I can understand. But it seems to me that it doesnt have to be any more complicated than having a special "dynamic password" (or something better named than that!) field type where you can construct fill-in data based on existing fields in the same vault item, using a "tag" based UI. For example, here's how a theoretical "dynamic password" field could work, where I can build a single "dynamic" fill-in field by using concatenated "tags" that represent the names of existing fields in the vault item. This way, you could (at best) map the "password" form field entry to the "dynamic password" field for seamless auto-fills, or (at worst) manually copy and paste the contents of dynamic password field into the form. This way at the very least, you wouldnt have to manually copy and paste data from multiple fields every single time you want to login. You'd just have to copy a single field!

motivio I don't have any updates to share but I can share your request for this feature with the team. Are you able to provide examples of websites that you've encountered that require the password + TOTP to be entered into one field? 🙂 -Dave

My team would be a +7 looking for this feature to be implemented in all 1Password apps. The "dynamic password" mockup proposed by melorama looks perfect! We would use this for login to Sophos firewall portals and when using the VPN app. Password is a concatenation of our network password plus the one-time password (ie. Password123456). Currently we need to juggle the app to copy/paste multiple values before the OTP expires. Dave

Until the 1PW devs add this functionality, here's https://gist.github.com/melmatsuoka/7c8bee12c64096d462db128633b7c3da.

This mostly helpful only if you're on macOS, but I created a Keyboard Maestro macro that auto-concatenates the TOTP code with the password, for one-click generation of a valid OPNsense login password. https://www.postproductive.tv/2023/07/31/using-1password-cli-to-login-to-opnsense-with-concatenated-otp-codes/

Accounts where TOTP code should be appended (or prepended) to the password

61 Replies

1P_Dave
Moderator
5 months ago
Bhellx

Thanks for following up. The feature request is still open with our product team but I don't have any news to share. Hopefully this is a use case that can be better accommodated in the future.

-Dave

ref: PB-43137543
Bhellx
New Contributor
5 months ago
Just checking in: How close are we to a checkbox / setting that appends the OTP to the password? Is this item on a development map of does it just live in this forum? Do we ever hear back from the product team?
1P_Evon
1Password Team
5 months ago
melorama

When turning off the 1Password extension on your iOS device, is there an option at the bottom of the window to Share across devices?

Turning off 1Password for Safari was a temporary step to check if you can autofill from the 1Password app instead. You can re-enable the 1Password extension in Safari and continue to use the Autofill from the app by selecting your item from above the keyboard.

On another note, if you'd like to turn off the Autosubmit specifically for your OPNsense Login item, here are the steps:

Open Safari.

Tap the extensions icon in Safari's address bar and select 1Password.

Tap your Login item.

Tap the three dots and select Don't sign in automatically.

Here's a screenshot for reference:

Let me know how that goes.

-Evon
melorama
Occasional Contributor
5 months ago
Oh dear, I spoke too soon. As it turns out, turning off the extension will turn off the extension for ALL devices that are logged in to the same iCloud account. So when I disable the 1Password extension on my iOS device, the Safari extension on my Macs also become disabled (and vice versa).

So this is still a kludgey "workaround" (albeit admittedly so far the simplest workaround) until either OPNsense, USAA et. al., all start redesigning their login forms to have dedicated OTP fields (https://github.com/opnsense/core/issues/6310), or 1Password adds a custom "dynamic field" option, as mentioned earlier in the thread.
1P_Evon
1Password Team
5 months ago
melorama

You're welcome. I'm glad to hear that helped. 🙂

-Evon
melorama
Occasional Contributor
5 months ago
1P_Evon Ah, thanks for that tip! That definitely helps ease some of the pain of logging in via Safari on iOS.
1P_Evon
1Password Team
5 months ago
melorama,

Thank you for your reply. Could you please temporarily turn off 1Password for Safari and make sure you are auto-filling directly from the 1Password app? Keep in mind that while the 1Password app auto-fills, it does not automatically submit your information- that feature is exclusive to 1Password for Safari. Moreover, auto-filling from 1Password for Safari does not copy the one-time password.

Open the Settings app on your iOS device.

Tap Apps > Safari > Extensions > 1Password.

Turn off Allow Extension.

After that, navigate to the website and select the Login item or key icon 🔑 above the keyboard to Autofill from the 1Password app.

Let me know how that goes.

-Evon
melorama
Occasional Contributor
5 months ago
1P_Evon The issue with that—at least with the current version of 1Password on iOS (8.10.56)—is that 1Password will autofill the password field, and also submit the login form at the same time it copies the OTP code to the clipboard. This results in the password field becoming reset due to the submitted password being incorrect. So you never get a chance to prepend the copied OTP code to the auto-filled password before the login form gets auto-submitted.

In which case, you'd need to manually switch back to the 1Password app, copy the OTP field, switch back to Safari, paste in the code, then switch back to 1Password, copy the Password field, switch back to Safari, tap the password field, try to manually move the cursor to the end of the previously entered OTP code, long press to bring up the "Paste" option, tap on "Paste", then tap on the "Login"button.

Oh, and you have to make sure that you do all of this before the TOTP code expires. And you also have to completely disable the Autofill feature in the iOS settings, which severely limits the convenience of using 1Password on iOS.

So I effectively cannot login to my OPNsense router on iOS unless I either completely disable Autofill, or if I insecurely manually concatenate the OTP and static Password in a notes app or something via copy paste from the 1Password app, then manually copy/pasting the concatenated password back into the Safari password field. And again, trying to do this all before the OTP code expires.
1P_Evon
1Password Team
6 months ago
melorama, Thank you for bumping the thread. I'm sorry you're experiencing difficulties filling in your Login for OPNsense on your mobile device. I've shared your comment with our product team.

If you're using iOS or Android, when you utilize the autofill feature from the 1Password app, the one-time password will be automatically copied to your clipboard as long as Copy One-Time Passwords is toggled on in the app settings. After that, you can paste the code before or after the auto-filled password. Are you experiencing different behaviour?

-Evon
melorama
Occasional Contributor
6 months ago
Just bumping this request again, as I just realized how much worse this is when trying to login to my OPNsense router while using a mobile device! It’s only a minor annoyance on a desktop computer, where you can quickly switch between apps (or by using a macro based system with the CLI tool, as I mentioned earlier in this thread). But on mobile it’s next to impossible!