Manually changed generated password seems accepted but is not stored |
|||
Issue descriptionChrome Version: 58.0.3029.110 OS: Windows 10 64 bit I was recovering/updating my password with https://www.synchronycredit.com/ when Chrome correctly offered to me a new generated password. But as the site requires the password to contain at least 2 numbers I had to manually change the generated one: 1) Clicked the proposed password dialog/panel -> both "new password" and "repeat password" fields where filled out with the password showing as *s. 2) Click on the "new password" field -> the plain password was presented. 3) Manually added a number character to it -> the plain password was editable and presented the change and the "repeat password" had a character added and the site Javascript confirmed the password still matched each other. This flow made me assume that a manual change was allowed and supported. But what happened is that when I went back to the site I failed to login. Verifying the password at https://passwords.google.com/ I noticed that the added digit was not present. What was saved was the original, unmodified password.
,
Jun 9 2017
Thanks for reporting y carlosk@. Please clarify (1). Showing as *s? The issue looks interesting. Are you sure that the unmodified password was saved? Did you check at chrome://settings/passwords? Perhaps password.google.com hadn't received all updates when you check. I am not able to register at that site. Could you provide some more info? Say, video with masked confidential data or screenshots. I know it is not easy, but I have no idea what happened... :(
,
Jun 9 2017
Just realized that "*s" means ***********. Thought sth more magical happened :)
,
Jun 9 2017
I haven't looked at chrome://settings/passwords but from past experience http://password.google.com/ was always immediately up-to-date. Also note that I did verify that the unaltered generated password *was there* so the issue was not syncing related. And my guess is that you should be able to repro this with any website where Chrome should offer password suggestions for a recover/update password page.
,
Jun 11 2018
This issue has been Available for over a year. If it's no longer important or seems unlikely to be fixed, please consider closing it out. If it is important, please re-triage the issue. Sorry for the inconvenience if the bug really should have been left as Available. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Jun 12 2018
|
|||
►
Sign in to add a comment |
|||
Comment 1 by vabr@chromium.org
, Jun 8 2017Labels: -Pri-3 Hotlist-Polish Pri-1
Status: Available (was: Untriaged)