New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 635271 link

Starred by 2 users

Issue metadata

Status: Assigned
Owner:
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Mac
Pri: 2
Type: Bug

Blocking:
issue 770184



Sign in to add a comment

Removed auto-fill passwords don't delete (still auto-fill)

Reported by ajdun...@gmail.com, Aug 6 2016

Issue description

UserAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.82 Safari/537.36

Steps to reproduce the problem:
1. Visit login page where Chrome auto-fills username/pass
2. Click icon in omnibox, click x to remove, and "done"
3. Refresh page, still fills in 1 or 2 accounts, (sometimes removes a few others)

What is the expected behavior?
It should delete all saved passwords immediately and not keep any x'd out

What went wrong?
Kept 1 or 2 accounts each time, on multiple sites. Usually the one I sign in with primarily

Did this work before? No 

Chrome version: 52.0.2743.82  Channel: stable
OS Version: OS X 10.11.6
Flash Version:
 
Cc: durga.behera@chromium.org
Components: UI>Browser>Autofill
Labels: Needs-Feedback
Thanks for the report, could you please help with the site urls where the issue is observed for further triage it.

Comment 2 by ajdun...@gmail.com, Aug 9 2016

Most sites are doing this, for example Box.com login page.
Project Member

Comment 3 by sheriffbot@chromium.org, Aug 17 2016

Labels: -Needs-Feedback Needs-Review
Owner: durga.behera@chromium.org
Thank you for providing more feedback. Adding requester "durga.behera@chromium.org" for another review and adding "Needs-Review" label for tracking.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Owner: ma...@chromium.org
Status: Assigned (was: Unconfirmed)
Assigning to mathp to investigate further.

Comment 5 by zkoch@chromium.org, Aug 18 2016

Cc: sabineb@chromium.org
Components: -UI>Browser>Autofill UI>Browser>Passwords
Mathp is OOO. This is a password thing. Fixing the component and adding others.
Cc: vasi...@chromium.org
I wasn't able to reproduce the issue. You're writing that it still autofilled the credentials after refresh of the page. Are you still able to reproduce this behavior?
What is in chrome://settings/passwords after you delete the account? Do you see a password for the site?

Comment 8 by ajdun...@gmail.com, Aug 24 2016

I was able to replicate this on paypal and take a video. I see two potential bugs:

1. This might be a user experience thing, but its not clear when I click the x next to a saved password if I need to click "done" or not. Since you show a strike-through it might be obvious and not needed to have the button there

2. Regardless, I tried x-ing out as well as clicking done, and often I need to do this several times with several refreshes to see it removed.
password filler.mov
2.6 MB Download
There is no need to click done.

I'm trying to understand if we just don't show some of the duplicates in the beginning (can happen due to the ranking algorithm) or just "delete" doesn't work.
How did your credential list look like in chrome://settings/passwords during the experiment? The list is updated automatically. Do you see disappearing credentials after pressing 'x' every time?

Comment 10 by ajdun...@gmail.com, Aug 27 2016

Took a gif showing the password manager while i remove them. It looks like its removing one at a time instead of all?
passwords.gif
1.1 MB View Download
How did you create these credentials? Are they coming from Chrome or Android app? If Chrome, was it the same sign-in form as in the gif?

Comment 12 by ajdun...@gmail.com, Sep 15 2016

Chrome web app. I used the normal login forms, yes.
Could you navigate to chrome://histograms/ and search for PasswordManager.KeychainMigration.Status 
The corresponding block you can post here.

Comment 14 by ajdun...@gmail.com, Sep 15 2016

Histogram: PasswordManager.KeychainMigration.Status recorded 1 samples, average = 1.0 (flags = 0x1)
0  O                                                                         (0 = 0.0%)
1  ------------------------------------------------------------------------O (1 = 100.0%) {0.0%}
2  ... 

I see the only possible explanation of what's happening. chrome://settings/passwords page groups similar logins. Therefore, one entry there can hide many actual database entries. When one deletes a credential in the bubble, he deletes only one credential. Basically the bubble doesn't know about all those duplicates. In the passwords.gif file above there are two hints:
- "aarondunn" disappears correctly while "peter.dunn" was deleted after clicking in the bubble for the second time.
- The store contains duplicates for "ajdunn83" with different passwords. One of the logins is definitely wrong.

The question is how you saved those credentials? In particular didn't you observe a prompt for updating the password for "ajdunn83"?

Comment 16 by ajdun...@gmail.com, Sep 19 2016

I saved them through the normal prompt to remember a password.
And for the 5 entries in chrome://settings/passwords you clicked exactly 5 times on "Save"?

Comment 18 by ajdun...@gmail.com, Sep 19 2016

Only if prompted to by Chrome. I think it must have saved some of the logins automatically as I don't recall clicking save that often.

Comment 19 by ma...@chromium.org, Oct 18 2016

Owner: sabineb@chromium.org
Labels: -Needs-Review
Cleaning up "Needs-Review" label as we are not using this label for triage anymore. Ref bug for this cleanup 684919

Comment 21 by kolos@chromium.org, Jan 26 2018

Blocking: 770184

Sign in to add a comment