|
Klassiska filtyper är inte längre tillgängliga för användning från och med januari 2021. Du kan överföra dina klassiska filer eller ladda ner en PDF. Läs mer

Chrome repeatedly prompts to save MFA validation codes as if they are passwords

Begär demo

I use the Chrome browser which autofills my non-trivial password when I login. Workiva then emails me a 6-digit code that I have to enter within 10 minutes to complete the Multi-Factor Authentication.

Every single time I enter an MFA code, the Chrome browser offers to save that 6-digit code as my new password. At some point, I'm afraid I will click yes by accident and lose my real password.

The MFA code is not a password. It is a one-time token that expires immediately after use. It can't be re-used. Thus, it can be treated as a plaintext field, rather than as a secure "password" in the HTML form. That way, Chrome would not assume it was a password, and it would not offer to overwrite my real password every time I login.

0

Kommentarer

1 kommentar

Datum Röster
  • Brooke Mortvedt

    Thanks for sharing this, Glenn Parker I will create a ticket for you to see if this can be looked into. Have a great day!

    0

Du måste logga in om du vill lämna en kommentar.