New issue
Advanced search Search tips

Issue 883689 link

Starred by 1 user
Status: Assigned
Owner:
vasi...@chromium.org
Cc:
swarnasree.mukkala@chromium.org
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 2
Type: Bug



Sign in to add a comment

duplicated password when generated

Reported by robert.e...@gmail.com, Sep 13 
UserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.92 Safari/537.36

Steps to reproduce the problem:
1. try to change your password in any website
2. choose for the new password the generate strong password option
3. when the popup appear to save it select yes
4. logout from that site (or try it out from another device)
5. try to login (with the auto fill credentials) , it will tell you invalid password

What is the expected behavior?
the browser auto fill the correct (new) password

What went wrong?
for some reason when you generate password the browser doesn't overwrite the old password but add it as a new one but with the same old website and username so you can't see the new password

also logged to passwords.google.com found the old and new password, chrome from android shows only the old password 

Did this work before? Yes 68

Chrome version: 69.0.3497.92  Channel: stable
OS Version: 10.0
Flash Version: 

the work around is 
1. go to chrome://settings/passwords
2. search for the website
3. you will find two rows with the same username
4. see the password of both and delete the old one

note: you may need to wait for a minute to sync to your other devices

Comment 1 by rsesek@chromium.org, Sep 13

Components: UI>Browser>Passwords
Labels: -Type-Bug-Security -Restrict-View-SecurityTeam Type-Bug
Thanks for the report. I don't think there's any security issue here, but this does sound like a bug. I'll forward it to the team responsible for the feature.

Comment 2 by robert.e...@gmail.com, Sep 13 

Sorry didn't know what should be the right category for it

Comment 3 by krajshree@chromium.org, Sep 14

Labels: Needs-Bisect Needs-Triage-M69

Comment 4 by battre@chromium.org, Sep 14

Owner: vasi...@chromium.org
Status: Assigned (was: Unconfirmed)

Comment 5 by vasi...@chromium.org, Sep 14 

Can you clarify what exactly prompt you see in the step #3?

Comment 6 by robert.e...@gmail.com, Sep 14

password popup.png
6.6 KB View Download

Comment 7 by robert.e...@gmail.com, Sep 14

duplicated passwords.png
9.5 KB View Download

Comment 8 by swarnasree.mukkala@chromium.org, Sep 14

Cc: swarnasree.mukkala@chromium.org
Labels: Triaged-ET Needs-Feedback
Unable to reproduce the issue on reported chrome version #69.0.3497.92 using windows 10 by following below steps.

Steps:
=====
1.Launched chrome by prefixing the executable path of chrome to this" --force-fieldtrials=PasswordGenerationRequirements/Enabled --force-fieldtrial-params=PasswordGenerationRequirements.Enabled:version/1/prefix_length/0/timeout/5000 --enable-features=PasswordGenerationRequirements,PasswordGenerationRequirementsDomainOverrides" through command line.
3.Navigated to www.lowes.com.
4.Sign up for new account and generated password by generate strong password option.
5.Logged out from account
6.Tried to login into the lowes.com with autofill credentials, able to login and observed the latest password under chrome://settings/passwords.

Attached screencast for reference.
@reporter: Could you please review the attached screencast and let us know if anything is being missed here.

Thanks.!
883689.mp4
14.6 MB View Download

Comment 9 Deleted

Comment 10 by robert.e...@gmail.com, Sep 14 

can you please redo with manual password when register and then generated password on change?

Comment 11 by robert.e...@gmail.com, Oct 9 

here is example with chess.com
google-password.wmv
2.1 MB Download
►

Sign in to add a comment