Password Manager

OneMany

Sometimes if you register an account on a website they also sent you a verification-code to your mobile. PW-Manager then thinks that's the new password --> you get asked if you want to update your PW for this account and if you are not careful and klick "yes" you have saved the verification-code as your new password for this specific website. This got me locked out of two accounts until I had it figured out... 🙁

Verification-codes shoul not be interpreted as new passwords.

Version 0.99.131.0.2-beta (WebKit 619.1.11.111.2)

Catalina (10.15)

nrudnyk

@OneMany Many thanks for reporting this.

Would you be able to share the service you used with such verification codes and the exact flow to help us reproduce your specific issue?

Does this happen during registration or later when 2FA is set up? I've just tried email verification codes as well as 2FA and wasn't able to reproduce the issue, hence wondering whether you could help us. Thanks!

sarno

nrudnyk I've just tried email verification codes as well as 2FA and wasn't able to reproduce the issue

My reading of the OP gave me the impression they were talking about SMS-based 2FA.

I think Google requires phone number verification as part of their sign up process these days - maybe try that?

OneMany

Yes, thanks sarno, I was talking about verification-codes sent as sms on mobile phone.
I hope that clarification helps.