Feature Request: Enhanced Auto-Fill for TOTP and Security Questions

Feature Description

Enhance the Bitwarden browser extension and client applications to automatically detect and autofill Time-based One-Time Passwords (TOTP) and answers to security questions on websites and applications.

Use Cases / Benefits

  • TOTP Auto-Fill: Streamlines the two-factor authentication process by automatically inputting TOTP codes, especially on websites that restrict copy-pasting into TOTP fields.

  • Security Questions Auto-Fill: Simplifies the login process on platforms that use security questions as an additional authentication layer, particularly on sites that prevent copying and pasting into these fields.

Implementation Details

  1. TOTP Auto-Fill

    • Detection Mechanism: Implement a method to identify TOTP input fields on web pages following a successful username and password submission.

    • Auto-Fill Process: Once a TOTP field is detected, Bitwarden should automatically input the appropriate TOTP code without requiring manual user intervention.

    • User Control: Introduce a toggle option in the settings menu, allowing users to enable or disable the TOTP auto-fill feature according to their preference.

  2. Security Questions Auto-Fill

    • Custom Fields Utilization: Leverage Bitwarden’s existing custom fields feature to store security question answers. Users can define custom fields corresponding to specific security questions for each login item.

    • Auto-Fill Capability: When a security question is presented, Bitwarden should match the question to the stored custom field and autofill the answer.

    • User Interaction: Display a prompt or popup when a security question is detected, allowing users to confirm the autofill action and select the appropriate answer if multiple are available.

    • User Control: Provide a setting option to enable or disable the security questions auto-fill feature, giving users control over this functionality.

By implementing these enhancements, Bitwarden can provide a more seamless and user-friendly experience, particularly in scenarios where traditional copy-paste methods are restricted.

A post was merged into an existing topic: Enhanced support for “Security Questions” and Answers (e.g., capturing, generating, autofilling)