Some websites, particularly banks, require 3 or 4 specific characters of the password to be entered. Eg 4 8 and 16.
Often these are different password input fields and the auto fill will put the entire password in each box. I have to view the password and count the characters to figure out what needs typing.
KeePass has a feature for this called Pick Chars
Please provide an example web page where you encounter the problem 
Probably quite hard to provide an example URL, as these pages are usually presented after you have entered a name and password. But itâs a widely used technique, especially by banks. Surely a developer has an account with this kind of login?
Itâs an important issue for usability though, I didnât know you can do it in KeePass. LastPass doesnât have it, you have an opportunity to go one better!
Here is an example with the barclays.fr site:
The 1st page is standard login/password form which is smoothly managed by bitwarden.
The 2nd page waits for two random letters from an additional âsecret wordâ. Unfortunately as it marked as a âpasswordâ field type, bitwarden wrongly automatically fill it with the full standard password.
login field:
<input ⌠type=âtextâ data-com.agilebits.onepassword.user-edited=âyesâ>
password field:
<input ⌠type=âpasswordâ data-com.agilebits.onepassword.user-edited=âyesâ>
and on the 2nd page, the secret word field:
<input ⌠maxlength=â2â type=âpasswordâ data-com.agilebits.onepassword.user-edited=âyesâ>
the page URL is the same for the two pages, so itâs not easy to discriminate between both
Metro Bank has the same, and itâs even doubled! I tried to deal with it using custom fields, but I donât think itâs doable.
This part:
<input id="Pass1_QUE_89907D559BB331AD501200" class="Pass_QUE_89907D559BB331AD501200 seed-pass-text" maxlength="1" type="password">
So, this time Pass1 is for 3rd character from right password.
But next time, Pass1 field might be for 2nd character.
In other words, I havenât found a way to associate unique id/class with character digit.
And right password is even more rubbish:
Basically, days when I could ctrl + shift + L to my bankâs website are gone. I hate them all, except Monzo. Monzo has a magic link, magic link is friendly.
Thanks for providing examples everyone, as RickJ said, you often only get to these pages after entering a valid user name. Apparently Iâm too new of a user to post lots of screenshots and links so Iâll give each example separately if it lets me
The only example I know of where you can see this is Nationwide with Log in using my Memorable Data selected, you have to start typing into the Customer Number and Memorable data (basicaslly just one of 3 different passwords) before it shows you which 3 digits of the passnumber to enter. This one isnât so bad as the passnumber is 3 digits and Bitwarden does enter the Memorable data as a password but not the Customer Number as the username.
After entering the customer number here you are presenting with a screen shows a user selected image and phrase for your verification and then 2 separate partial password entries
These are all 6 password entries and so Bitwarden will put the full password in all 6 boxes
This one is particularly annoying because the online banking opens in a separate popup (top right of page here, you are then asked for 3 characters of a password and the answer to a question, so another password. Since it is a popup window, I donât have access to the Bitwarden extension anyway (in Chrome at least).
Finally the Lloyds Banking Group (Lloyds, TSB and Halifax, all have basically the same website), you are presented with a normal login screen where Bitwarden works as expected here but you are then asked to select 3 characters from a password using drop downs
@Andrew_Jackson I totally understand your pain (and thank you for more examples, I know what banks have awful login screens now, so Iâll stay away from them, lol). Iâm still not sure how BW could match particular digits with bankâs entry form. Based on what I could see on Metrobank, itâs written as a text (easy for human), but html for a box is always the same, form 1, form 2, form 3, not form 1 for character 3, form 2 for character 5, form 3 for character 7.
It might be different for your banks and they do âform 2 for character 5â thing), but then itâs doable with custom fields already.
I would love to have easier access, but I have to admit, banks are NOT making it any easier for password managers⌠
I donât think thereâs any suggestion that BW should be able to pick the correct characters by itself. But it could provide an easy way for the user to pick specific characters from their keyword.
E.g. if my keyword is 8 letters long, then whenever the current field is length 1, BW would present a widget allowing me to select a number between 1 & 8. I still have to cursor into the field, and see the page asking for âletter 3â, but all I have to do is pick â3â in BW, and it puts the 3rd letter into the field.
This is still far easier than having to remember the keyword, and count on my fingers to work out the correct letter!
Would this be do-able?
Yes, I was expecting the user would have to say which character is required but bw could then autofill just that character from the password.
If the field length is not reliable to identify this could it be a setting in the password entry, âThis website uses partial passwordsâ checkbox?
Signed up to add to this.
I understand the problems around the filling part but, as RickJ says, perhaps just showing the subset. I appreciate itâs another button on your fantastically clean UI but would be extremely helpful
Password safe shows a possible method
This problem seems to be occurring more frequently and made worse by the fact that if you view your password it does not stay on top so as soon as you enter the first character the password has gone, meaning you have to remember them all in one go which in my case is prone to errors, particularly if symbols are involved! While the Password Safe method would be ideal provided it stays on top till closed, just keeping the whole password on top would help.
Further thought on this is to delete the password and enter it as a new custom field so the password is not entered in all the boxes in full, secondly just make the "pop out to new window " stay on top to reduce the number of times a window has to be actively closed.
