Issue with autofill by using internal OTP of a Password Manager

  • Resolved vallered

    (@vallered)


    1 month ago

    Autofill OTP is generally working fine with my Password Manager. But with WordPress and your 2FA Plugin the following happens:

    Logging in on mywebsite.com/wp-admin, credentials are automatically filled in by the Password manager, and very quick after that the OTP generated by that Password Manager. This leads to an error (“FEHLER: Ungültiger Verifizierungscode.
    ).

    Clicking then on the option below (“Deine Authentifizierungs-App für zeitbasierte Einmalpasswörter (TOTP) verwenden”) leads to fill in the OTP from that password manager again and it works.

    I guess the issue is as follows: Very quick autofill leads to an error, because the OTP input screen with its scripts is not fully loaded when the OTP is put and sent.

    What is probably needed: An option (or automatism) to slow down when loading the OTP screen until all necessary scripts are loaded or something like that

    • This topic was modified 1 month ago by vallered.

    The page I need help with: [log in to see the link]

Viewing 3 replies - 1 through 3 (of 3 total)
  • Rezwan Shiblu

    (@rezwanshiblu1952)

    1 month ago

    The screen you land on first is whichever method is set as primary in your profile, and the link under it switches you to TOTP. So if your primary is email codes or backup codes, the code your password manager fills in will come back invalid no matter how fast it happens. That would explain why the same code works once you click through to the TOTP screen.

    Check Users > Your Profile, scroll to Two-Factor Options, and see which method is set as primary. If it isn’t the authenticator app, switch it and save.

    If TOTP is already your primary and it still fails the first time, worth reporting here: https://github.com/WordPress/two-factor/issues

    Thread Starter vallered

    (@vallered)

    1 month ago

    Setting “App…” instead of “standard” solved it, many thanks

    Plugin Contributor Brian Haas

    (@masteradhoc)

    1 month ago

    Thank you @vallered for the Request and @rezwanshiblu1952 for helping out here!
    If you feel that anything could be improved to clarify things please let us know – we’re happy to work on it.

Viewing 3 replies - 1 through 3 (of 3 total)

You must be logged in to reply to this topic.