Issue metadata
Sign in to add a comment
|
Chrome has forgotten all my saved passwords
Reported by
tedyoung...@gmail.com,
Oct 23 2017
|
||||||||||||||||||||||
Issue descriptionUserAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.100 Safari/537.36 Steps to reproduce the problem: 1. I've tried to reset passwords. 2. Chrome offers to save them but doesn't. 3. What is the expected behavior? That Chrome remembers the username and password for sites I have indicated it should. What went wrong? Sites where I had Chrome remember my username and passwords no longer do. I remember my username, but few of the passwords. Even after typing in the password, or resetting it, when Chrome offers to save the password, it most cases it doesn't. Did this work before? N/A Chrome version: 61.0.3163.100 Channel: n/a OS Version: OS X 10.13.0 Flash Version: Shockwave Flash 27.0 r0 I did upgrade to High Sierra on Saturday, but had no problems afterwards or on Sunday.
,
Oct 24 2017
,
Oct 24 2017
Did you do any changes to your Keychain? Chrome stores passwords encrypted with a secret saved in the Keychain. If that secret is lost, Chrome cannot use its passwords database. Do chrome://sync-internals show any errors for passwords? Cc-ing vasilii@ who might have further debugging tips.
,
Oct 24 2017
Is chrome://settings/passwords completely empty?
,
Oct 24 2017
I don't use Keychain. I've never really trusted Apple to keep a secret. It turns out that the passwords I've reset since the problem have remained available, just nothing before.
,
Oct 24 2017
Thank you for providing more feedback. Adding requester "vabr@chromium.org" to the cc list and removing "Needs-Feedback" label. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Oct 24 2017
No. The passwords are all there, even for the sites that they no longer show up for automatically.
,
Oct 25 2017
Thanks for the replies. You don't use Keychain, but Chrome does, and if it got wiped or inaccessible through some other action, it might still have affected Chrome's ability to decrypt the passwords you stored. Passwords created after the reset are encrypted with the current secret, which is accessible to Chrome via Keychain, and therefore those passwords are usable. The older ones are encrypted by something lost to Chrome, so are unusable. I am a bit surprised that all the passwords, even the unusable ones, show up in settings. If you view the password values there, do you actually see the old passwords?
,
Oct 25 2017
Yes. I can even use the old passwords if I haven't reset them, though Chrome no longer provides them automatically when I go the site.
,
Oct 25 2017
Thank you for providing more feedback. Adding requester "vabr@chromium.org" to the cc list and removing "Needs-Feedback" label. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Oct 26 2017
Thanks for the response in #9. Not sure what you mean by "use the old passwords": do you mean you can copy them out of the passwords settings page and use them successfully to log into the sites? If that's true, then my hypothesis about broken decryption and Keychain issues is incorrect. In that case, it would help us if you can pick a website where Chrome stores a correct password for you but won't fill it automatically, and do the following: (1) Open chrome://password-manager-internals/ in one tab. (2) Open the site with the login form in another tab, let it fully load, so that the login fields are visible and the reload button in top shelf of Chrome appears. (3) Go back to the chrome://password-manager-internals/ tab and copy the logs. (4) Share the logs with us. Those logs describe in detail what steps password manager did when it tried to fill the forms (and failed). The logs are designed carefully not to leak any of your private data, but they contain the hostname of the page. If you don't want to share the hostname, feel free to edit it out before sharing. Thanks! Vaclav
,
Oct 26 2017
Vaclav, Thank you for your help, and also for the use of word "hypothesis" instead of theory. As an old biology major who became an English teacher and free-lance writer, the misuse of theory when someone means a hypothesis has always been a pet peeve. There were some old passwords that I had remembered, and a good number stored in encrypted form in Evernote, and they worked. I hadn't tried copying them out of the passwords setting page and pasting them in. I copied and pasted a password from Google, which chrome://settings/passwords led me to, and it worked. Here is the log from chrome://password-manager-internals/ for the Merriam Webster Unabridged Dictionary: The new state of the UI: 0 The new state of the UI: 0 Message: PasswordAutofillAgent::DidStartProvisionalLoad Message: PasswordAutofillAgent::SendPasswordForms only_visible: false Security origin: https://www.google.com/ Number of all forms: 1 Message: Generation invalid PasswordForm Message: PasswordAutofillAgent::SendPasswordForms only_visible: true Security origin: https://www.google.com/ Number of all forms: 1 Form found on page: { Action : , Form name or ID : } Form is visible: true Some control elements not associated to a form element are visible: false Message: PasswordManager::CreatePendingLoginManagers SSL errors present: false IsPasswordManagementEnabledForCurrentPage: true Number of pending login managers (before): 0 Number of pending login managers (after): 0 Message: PasswordManager::OnPasswordFormsRendered Message: PasswordManager::CanProvisionalManagerSave Message: No provisional save manager Message: Generation invalid PasswordForm Message: PasswordAutofillAgent::SendPasswordForms only_visible: false Security origin: chrome-search://most-visited/ Number of all forms: 0 Message: PasswordAutofillAgent::SendPasswordForms only_visible: true Security origin: chrome-search://most-visited/ Number of all forms: 0 Some control elements not associated to a form element are visible: false Message: PasswordManager::CreatePendingLoginManagers SSL errors present: false IsPasswordManagementEnabledForCurrentPage: true Number of pending login managers (before): 0 Number of pending login managers (after): 0 Message: PasswordManager::OnPasswordFormsRendered Message: PasswordManager::CanProvisionalManagerSave Message: No provisional save manager Message: PasswordAutofillAgent::SendPasswordForms only_visible: false Security origin: https://www.google.com/ Number of all forms: 1 Message: Generation invalid PasswordForm Message: PasswordAutofillAgent::SendPasswordForms only_visible: false Security origin: https://clients5.google.com/ Message: Webpage is empty Message: PasswordAutofillAgent::SendPasswordForms only_visible: true Security origin: https://clients5.google.com/ Message: Webpage is empty Message: PasswordAutofillAgent::DidStartProvisionalLoad Message: |frame| is not the main frame Message: PasswordAutofillAgent::SendPasswordForms only_visible: false Security origin: https://accounts.google.com/ Message: Webpage is empty Message: PasswordAutofillAgent::SendPasswordForms only_visible: true Security origin: https://accounts.google.com/ Message: Webpage is empty Message: PasswordAutofillAgent::SendPasswordForms only_visible: false Security origin: https://notifications.google.com/ Number of all forms: 0 Message: PasswordAutofillAgent::SendPasswordForms only_visible: true Security origin: https://notifications.google.com/ Number of all forms: 0 Some control elements not associated to a form element are visible: false Message: PasswordManager::CreatePendingLoginManagers SSL errors present: false IsPasswordManagementEnabledForCurrentPage: true Number of pending login managers (before): 0 Number of pending login managers (after): 0 Message: PasswordManager::OnPasswordFormsRendered Message: PasswordManager::CanProvisionalManagerSave Message: No provisional save manager Message: PasswordAutofillAgent::DidStartProvisionalLoad The new state of the UI: 0 Message: PasswordAutofillAgent::DidStartProvisionalLoad Message: PasswordAutofillAgent::SendPasswordForms only_visible: true Security origin: http://unabridged.merriam-webster.com/ Number of all forms: 2 Form found on page: { Action : , Form name or ID : } Form is visible: true Form found on page: { Action : , Form name or ID : } Form is visible: true Some control elements not associated to a form element are visible: false Message: PasswordManager::CreatePendingLoginManagers SSL errors present: false IsPasswordManagementEnabledForCurrentPage: true Number of pending login managers (before): 0 Number of pending login managers (after): 0 Message: PasswordManager::OnPasswordFormsRendered Message: PasswordManager::CanProvisionalManagerSave Message: No provisional save manager Message: Generation invalid PasswordForm Message: Generation invalid PasswordForm Message: PasswordAutofillAgent::DidStartProvisionalLoad Message: PasswordAutofillAgent::DidStartProvisionalLoad The new state of the UI: 0 Message: PasswordAutofillAgent::SendPasswordForms only_visible: false Security origin: https://unabridged.merriam-webster.com/ Number of all forms: 1 Form is a password form: { Action : https://unabridged.merriam-webster.com/ , New password element : , Origin : https://unabridged.merriam-webster.com/ , PSL match : false, Password element : password , Password generated : false, Scheme : HTML , Signon realm : https://unabridged.merriam-webster.com/ , Times used : 0, Username element : email } Message: PasswordManager::CreatePendingLoginManagers SSL errors present: false IsPasswordManagementEnabledForCurrentPage: true Number of pending login managers (before): 0 Adding manager for form: { Signature of form: 7789384296560062434 Signon realm: https://unabridged.merriam-webster.com/ Origin: https://unabridged.merriam-webster.com/ Action: https://unabridged.merriam-webster.com/ Form name: Form fields: email: 420638584, text password: 2051817934, password, off rememberme: 1065740151, checkbox } Message: FormFetcherImpl::Fetch FormFetcherImpl::state_: 1 Number of pending login managers (after): 1 Generation possible account creation forms: 1 Message: Generation: no non-blacklisted confirmation Message: FormFetcherImpl::OnGetPasswordStoreResults Number of results from the password store: 0 Message: PasswordFormManager::ProcessMatches SSL errors present: false IsPasswordManagementEnabledForCurrentPage: true Message: Generation disabled: no sync Message: PasswordAutofillAgent::SendPasswordForms only_visible: true Security origin: https://unabridged.merriam-webster.com/ Number of all forms: 1 Form found on page: { Action : , Form name or ID : } Form is visible: true Form is a password form: { Action : https://unabridged.merriam-webster.com/ , New password element : , Origin : https://unabridged.merriam-webster.com/ , PSL match : false, Password element : password , Password generated : false, Scheme : HTML , Signon realm : https://unabridged.merriam-webster.com/ , Times used : 0, Username element : email } Some control elements not associated to a form element are visible: false Message: PasswordManager::CreatePendingLoginManagers SSL errors present: false IsPasswordManagementEnabledForCurrentPage: true Number of pending login managers (before): 1 SSL errors present: false IsPasswordManagementEnabledForCurrentPage: true Message: Generation disabled: no sync Number of pending login managers (after): 1 Message: PasswordManager::OnPasswordFormsRendered Message: PasswordManager::CanProvisionalManagerSave Message: No provisional save manager Generation possible account creation forms: 2 Message: Generation: no non-blacklisted confirmation Message: Generation: no non-blacklisted confirmation Message: PasswordAutofillAgent::SendPasswordForms only_visible: false Security origin: https://unabridged.merriam-webster.com/ Number of all forms: 1 Form is a password form: { Action : https://unabridged.merriam-webster.com/ , New password element : , Origin : https://unabridged.merriam-webster.com/ , PSL match : false, Password element : password , Password generated : false, Scheme : HTML , Signon realm : https://unabridged.merriam-webster.com/ , Times used : 0, Username element : email } Message: PasswordManager::CreatePendingLoginManagers SSL errors present: false IsPasswordManagementEnabledForCurrentPage: true Number of pending login managers (before): 1 SSL errors present: false IsPasswordManagementEnabledForCurrentPage: true Message: Generation disabled: no sync Number of pending login managers (after): 1 Generation possible account creation forms: 3 Message: Generation: no non-blacklisted confirmation Message: Generation: no non-blacklisted confirmation Message: Generation: no non-blacklisted confirmation My thanks, Ted
,
Oct 26 2017
Thank you for providing more feedback. Adding requester "vabr@chromium.org" to the cc list and removing "Needs-Feedback" label. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Oct 27 2017
Thanks for the logs (and also for pointing out the difference between theory and hypothesis -- as a non-native user of English I'm always happy to hear advice on that). Looking at the logs, around the places containing the sub-string "fetch", I can see Chrome reporting that it found no passwords stored for the website origin https://unabridged.merriam-webster.com/. If you can see the passwords in your Chrome's settings page and inspect the URL associated with the Merriam-Webster passwords, it would be interesting to check whether its scheme (https:// or http://) and hostname (unabridged.merriam-webster.com) match https://unabridged.merriam-webster.com/. P.S. I will be on vacation until 8 November, so my apologies for not responding before that. My colleagues might be able to respond sooner, though.
,
Oct 27 2017
Thank you for providing more feedback. Adding requester "vabr@chromium.org" to the cc list and removing "Needs-Feedback" label. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Nov 3 2017
@ tedyoung723: Could you please respond to C#15 Thank you!!
,
Nov 3 2017
The scheme and hostname for https://unabridged.merriam-webster.com/ do match. I'm sorry. I had answered this question in comment 16, but for some reason it was deleted.
,
Nov 3 2017
Thank you for providing more feedback. Adding requester "divya.padigela@techmahindra.com" to the cc list and removing "Needs-Feedback" label. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Nov 6 2017
Unable to reproduce this issue on Mac OS 10.12.6 using chrome latest stable #62.0.3202.75 using the provided URL in comment #19. Observed chrome displays the saved username and password of multiple accounts as expected. Could some one from password team can look in to this issue? Thanks!
,
Nov 7 2017
Can you post the exact URL you have a password saved for on chrome://settings/passwords? You can find unabridged.merriam-webster.com account in the list and hover it. The whole URL would be in the tooltip. Then you can take a screenshot.
,
Nov 7 2017
,
Jan 4 2018
[mac bug triage] Closing from lack of response for over 30 days. Feel free to reopen if you have additional info.
,
Jan 4 2018
,
Nov 29
|
|||||||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||||||
Comment 1 by ligim...@chromium.org
, Oct 23 2017