New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 777577 link

Starred by 2 users

Issue metadata

Status: WontFix
Owner: ----
Closed: Jan 2018
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Mac
Pri: 3
Type: Bug-Regression

Blocking:
issue 714610



Sign in to add a comment

Chrome has forgotten all my saved passwords

Reported by tedyoung...@gmail.com, Oct 23 2017

Issue description

UserAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.100 Safari/537.36

Steps to reproduce the problem:
1. I've tried to reset passwords.
2. Chrome offers to save them but doesn't.
3. 

What is the expected behavior?
That Chrome remembers the username and password for sites I have indicated it should.

What went wrong?
Sites where I had Chrome remember my username and passwords no longer do. I remember my username, but few of the passwords. Even after typing in the password, or resetting it, when Chrome offers to save the password, it most cases it doesn't.

Did this work before? N/A 

Chrome version: 61.0.3163.100  Channel: n/a
OS Version: OS X 10.13.0
Flash Version: Shockwave Flash 27.0 r0

I did upgrade to High Sierra on Saturday, but had no problems afterwards or on Sunday.
 
Labels: Needs-Triage-M61
Components: UI>Browser>Passwords
Labels: -Needs-Triage-M61 Needs-Triage-M62

Comment 3 by vabr@chromium.org, Oct 24 2017

Blocking: 714610
Cc: vasi...@chromium.org
Labels: -Pri-2 Needs-Feedback Hotlist-Adobe Pri-3
Did you do any changes to your Keychain? Chrome stores passwords encrypted with a secret saved in the Keychain. If that secret is lost, Chrome cannot use its passwords database.

Do chrome://sync-internals show any errors for passwords?

Cc-ing vasilii@ who might have further debugging tips.
Is chrome://settings/passwords completely empty?
I don't use Keychain. I've never really trusted Apple to keep a secret. It turns out that the passwords I've reset since the problem have remained available, just nothing before.
Project Member

Comment 6 by sheriffbot@chromium.org, Oct 24 2017

Cc: vabr@chromium.org
Labels: -Needs-Feedback
Thank you for providing more feedback. Adding requester "vabr@chromium.org" to the cc list and removing "Needs-Feedback" label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
No. The passwords are all there, even for the sites that they no longer show up for automatically. 

Comment 8 by vabr@chromium.org, Oct 25 2017

Labels: Needs-Feedback
Thanks for the replies. You don't use Keychain, but Chrome does, and if it got wiped or inaccessible through some other action, it might still have affected Chrome's ability to decrypt the passwords you stored. Passwords created after the reset are encrypted with the current secret, which is accessible to Chrome via Keychain, and therefore those passwords are usable. The older ones are encrypted by something lost to Chrome, so are unusable.

I am a bit surprised that all the passwords, even the unusable ones, show up in settings. If you view the password values there, do you actually see the old passwords?
Yes. I can even use the old passwords if I haven't reset them, though Chrome no longer provides them automatically when I go the site. 
Project Member

Comment 10 by sheriffbot@chromium.org, Oct 25 2017

Labels: -Needs-Feedback
Thank you for providing more feedback. Adding requester "vabr@chromium.org" to the cc list and removing "Needs-Feedback" label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Comment 11 by vabr@chromium.org, Oct 26 2017

Labels: Needs-Feedback
Thanks for the response in #9. Not sure what you mean by "use the old passwords": do you mean you can copy them out of the passwords settings page and use them successfully to log into the sites?

If that's true, then my hypothesis about broken decryption and Keychain issues is incorrect.

In that case, it would help us if you can pick a website where Chrome stores a correct password for you but won't fill it automatically, and do the following:

 (1) Open chrome://password-manager-internals/ in one tab.
 (2) Open the site with the login form in another tab, let it fully load, so that the login fields are visible and the reload button in top shelf of Chrome appears.
 (3) Go back to the chrome://password-manager-internals/ tab and copy the logs.
 (4) Share the logs with us.

Those logs describe in detail what steps password manager did when it tried to fill the forms (and failed). The logs are designed carefully not to leak any of your private data, but they contain the hostname of the page. If you don't want to share the hostname, feel free to edit it out before sharing.

Thanks!
Vaclav

Comment 12 Deleted

Vaclav,

Thank you for your help, and also for the use of word "hypothesis" instead of theory. As an old biology major who became an English teacher and free-lance writer, the misuse of theory when someone means a hypothesis has always been a pet peeve. 

There were some old passwords that I had remembered, and a good number stored in encrypted form in Evernote, and they worked. I hadn't tried copying them out of the passwords setting page and pasting them in.

I copied and pasted a password from Google, which chrome://settings/passwords led me to, and it worked.

Here is the log from chrome://password-manager-internals/ for the Merriam Webster Unabridged Dictionary:

The new state of the UI: 0
The new state of the UI: 0
Message: PasswordAutofillAgent::DidStartProvisionalLoad 
Message: PasswordAutofillAgent::SendPasswordForms 
only_visible: false
Security origin: https://www.google.com/ 
Number of all forms: 1
Message: Generation invalid PasswordForm 
Message: PasswordAutofillAgent::SendPasswordForms 
only_visible: true
Security origin: https://www.google.com/ 
Number of all forms: 1
Form found on page: {
Action : ,
Form name or ID : 
}
Form is visible: true
Some control elements not associated to a form element are visible: false
Message: PasswordManager::CreatePendingLoginManagers 
SSL errors present: false
IsPasswordManagementEnabledForCurrentPage: true
Number of pending login managers (before): 0
Number of pending login managers (after): 0
Message: PasswordManager::OnPasswordFormsRendered 
Message: PasswordManager::CanProvisionalManagerSave 
Message: No provisional save manager 
Message: Generation invalid PasswordForm 
Message: PasswordAutofillAgent::SendPasswordForms 
only_visible: false
Security origin: chrome-search://most-visited/ 
Number of all forms: 0
Message: PasswordAutofillAgent::SendPasswordForms 
only_visible: true
Security origin: chrome-search://most-visited/ 
Number of all forms: 0
Some control elements not associated to a form element are visible: false
Message: PasswordManager::CreatePendingLoginManagers 
SSL errors present: false
IsPasswordManagementEnabledForCurrentPage: true
Number of pending login managers (before): 0
Number of pending login managers (after): 0
Message: PasswordManager::OnPasswordFormsRendered 
Message: PasswordManager::CanProvisionalManagerSave 
Message: No provisional save manager 
Message: PasswordAutofillAgent::SendPasswordForms 
only_visible: false
Security origin: https://www.google.com/ 
Number of all forms: 1
Message: Generation invalid PasswordForm 
Message: PasswordAutofillAgent::SendPasswordForms 
only_visible: false
Security origin: https://clients5.google.com/ 
Message: Webpage is empty 
Message: PasswordAutofillAgent::SendPasswordForms 
only_visible: true
Security origin: https://clients5.google.com/ 
Message: Webpage is empty 
Message: PasswordAutofillAgent::DidStartProvisionalLoad 
Message: |frame| is not the main frame 
Message: PasswordAutofillAgent::SendPasswordForms 
only_visible: false
Security origin: https://accounts.google.com/ 
Message: Webpage is empty 
Message: PasswordAutofillAgent::SendPasswordForms 
only_visible: true
Security origin: https://accounts.google.com/ 
Message: Webpage is empty 
Message: PasswordAutofillAgent::SendPasswordForms 
only_visible: false
Security origin: https://notifications.google.com/ 
Number of all forms: 0
Message: PasswordAutofillAgent::SendPasswordForms 
only_visible: true
Security origin: https://notifications.google.com/ 
Number of all forms: 0
Some control elements not associated to a form element are visible: false
Message: PasswordManager::CreatePendingLoginManagers 
SSL errors present: false
IsPasswordManagementEnabledForCurrentPage: true
Number of pending login managers (before): 0
Number of pending login managers (after): 0
Message: PasswordManager::OnPasswordFormsRendered 
Message: PasswordManager::CanProvisionalManagerSave 
Message: No provisional save manager 
Message: PasswordAutofillAgent::DidStartProvisionalLoad 
The new state of the UI: 0
Message: PasswordAutofillAgent::DidStartProvisionalLoad 
Message: PasswordAutofillAgent::SendPasswordForms 
only_visible: true
Security origin: http://unabridged.merriam-webster.com/ 
Number of all forms: 2
Form found on page: {
Action : ,
Form name or ID : 
}
Form is visible: true
Form found on page: {
Action : ,
Form name or ID : 
}
Form is visible: true
Some control elements not associated to a form element are visible: false
Message: PasswordManager::CreatePendingLoginManagers 
SSL errors present: false
IsPasswordManagementEnabledForCurrentPage: true
Number of pending login managers (before): 0
Number of pending login managers (after): 0
Message: PasswordManager::OnPasswordFormsRendered 
Message: PasswordManager::CanProvisionalManagerSave 
Message: No provisional save manager 
Message: Generation invalid PasswordForm 
Message: Generation invalid PasswordForm 
Message: PasswordAutofillAgent::DidStartProvisionalLoad 
Message: PasswordAutofillAgent::DidStartProvisionalLoad 
The new state of the UI: 0
Message: PasswordAutofillAgent::SendPasswordForms 
only_visible: false
Security origin: https://unabridged.merriam-webster.com/ 
Number of all forms: 1
Form is a password form: {
Action : https://unabridged.merriam-webster.com/ ,
New password element : ,
Origin : https://unabridged.merriam-webster.com/ ,
PSL match : false,
Password element : password ,
Password generated : false,
Scheme : HTML ,
Signon realm : https://unabridged.merriam-webster.com/ ,
Times used : 0,
Username element : email 
}
Message: PasswordManager::CreatePendingLoginManagers 
SSL errors present: false
IsPasswordManagementEnabledForCurrentPage: true
Number of pending login managers (before): 0
Adding manager for form: {
Signature of form: 7789384296560062434
Signon realm: https://unabridged.merriam-webster.com/
Origin: https://unabridged.merriam-webster.com/
Action: https://unabridged.merriam-webster.com/
Form name: 
Form fields: 
email: 420638584, text
password: 2051817934, password, off
rememberme: 1065740151, checkbox
}
Message: FormFetcherImpl::Fetch 
FormFetcherImpl::state_: 1
Number of pending login managers (after): 1
Generation possible account creation forms: 1
Message: Generation: no non-blacklisted confirmation 
Message: FormFetcherImpl::OnGetPasswordStoreResults 
Number of results from the password store: 0
Message: PasswordFormManager::ProcessMatches 
SSL errors present: false
IsPasswordManagementEnabledForCurrentPage: true
Message: Generation disabled: no sync 
Message: PasswordAutofillAgent::SendPasswordForms 
only_visible: true
Security origin: https://unabridged.merriam-webster.com/ 
Number of all forms: 1
Form found on page: {
Action : ,
Form name or ID : 
}
Form is visible: true
Form is a password form: {
Action : https://unabridged.merriam-webster.com/ ,
New password element : ,
Origin : https://unabridged.merriam-webster.com/ ,
PSL match : false,
Password element : password ,
Password generated : false,
Scheme : HTML ,
Signon realm : https://unabridged.merriam-webster.com/ ,
Times used : 0,
Username element : email 
}
Some control elements not associated to a form element are visible: false
Message: PasswordManager::CreatePendingLoginManagers 
SSL errors present: false
IsPasswordManagementEnabledForCurrentPage: true
Number of pending login managers (before): 1
SSL errors present: false
IsPasswordManagementEnabledForCurrentPage: true
Message: Generation disabled: no sync 
Number of pending login managers (after): 1
Message: PasswordManager::OnPasswordFormsRendered 
Message: PasswordManager::CanProvisionalManagerSave 
Message: No provisional save manager 
Generation possible account creation forms: 2
Message: Generation: no non-blacklisted confirmation 
Message: Generation: no non-blacklisted confirmation 
Message: PasswordAutofillAgent::SendPasswordForms 
only_visible: false
Security origin: https://unabridged.merriam-webster.com/ 
Number of all forms: 1
Form is a password form: {
Action : https://unabridged.merriam-webster.com/ ,
New password element : ,
Origin : https://unabridged.merriam-webster.com/ ,
PSL match : false,
Password element : password ,
Password generated : false,
Scheme : HTML ,
Signon realm : https://unabridged.merriam-webster.com/ ,
Times used : 0,
Username element : email 
}
Message: PasswordManager::CreatePendingLoginManagers 
SSL errors present: false
IsPasswordManagementEnabledForCurrentPage: true
Number of pending login managers (before): 1
SSL errors present: false
IsPasswordManagementEnabledForCurrentPage: true
Message: Generation disabled: no sync 
Number of pending login managers (after): 1
Generation possible account creation forms: 3
Message: Generation: no non-blacklisted confirmation 
Message: Generation: no non-blacklisted confirmation 
Message: Generation: no non-blacklisted confirmation 

My thanks,
Ted
Project Member

Comment 14 by sheriffbot@chromium.org, Oct 26 2017

Labels: -Needs-Feedback
Thank you for providing more feedback. Adding requester "vabr@chromium.org" to the cc list and removing "Needs-Feedback" label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Comment 15 by vabr@chromium.org, Oct 27 2017

Labels: Needs-Feedback
Thanks for the logs (and also for pointing out the difference between theory and hypothesis -- as a non-native user of English I'm always happy to hear advice on that).

Looking at the logs, around the places containing the sub-string "fetch", I can see Chrome reporting that it found no passwords stored for the website origin https://unabridged.merriam-webster.com/.

If you can see the passwords in your Chrome's settings page and inspect the URL associated with the Merriam-Webster passwords, it would be interesting to check whether its scheme (https:// or http://) and hostname (unabridged.merriam-webster.com) match https://unabridged.merriam-webster.com/.

P.S. I will be on vacation until 8 November, so my apologies for not responding before that. My colleagues might be able to respond sooner, though.

Comment 16 Deleted

Project Member

Comment 17 by sheriffbot@chromium.org, Oct 27 2017

Labels: -Needs-Feedback
Thank you for providing more feedback. Adding requester "vabr@chromium.org" to the cc list and removing "Needs-Feedback" label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Labels: Needs-Feedback
@ tedyoung723: Could you please respond to C#15

Thank you!!
The scheme and hostname for https://unabridged.merriam-webster.com/ do match. I'm sorry. I had answered this question in comment 16, but for some reason it was deleted.
Project Member

Comment 20 by sheriffbot@chromium.org, Nov 3 2017

Cc: divya.pa...@techmahindra.com
Labels: -Needs-Feedback
Thank you for providing more feedback. Adding requester "divya.padigela@techmahindra.com" to the cc list and removing "Needs-Feedback" label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Labels: TE-NeedsTriageHelp
Unable to reproduce this issue on Mac OS 10.12.6 using chrome latest stable #62.0.3202.75 using the provided URL in comment #19. Observed chrome displays the saved username and password of multiple accounts as expected.

Could some one from password team can look in to this issue?

Thanks!

Labels: -TE-NeedsTriageHelp
Can you post the exact URL you have a password saved for on chrome://settings/passwords?
You can find unabridged.merriam-webster.com account in the list and hover it. The whole URL would be in the tooltip. Then you can take a screenshot.
Labels: Needs-Feedback
[mac bug triage] Closing from lack of response for over 30 days. Feel free to reopen if you have additional info.
Status: WontFix (was: Unconfirmed)
Cc: -vabr@chromium.org

Sign in to add a comment