TOTP only filling the first digit of code, even though all 6 are being generated

Ask the Community Password Manager
, ,
1

I have one particular logon which shows the username, password and TOTP code fields, and when I click fill, the username and password are filled, but only the first digit is entered into the TOTP field. It works perfectly on all other websites so far.

I know the field can accept any data, and that the full 6 digits have been generated as I can straight away click into that same field and paste the value as it’s automatically been copied onto the clipboard, however I cannot work out why only the first digit is being filled, and only for this one form.

Inspecting the field (field name blanked in places with xxx) shows me this…

<input type="text" inputmode="tel" pattern="\d*" name="com.xxxxxxx.xxxxxx.xxxxxxx.web.authn.challenging.response2"> == $0

… which I can’t see any issues with (other than being silly permitting zero or more digits in this field).

Also, the field name having 2 at the end made me wonder if that was being interpreted by BitWarden as the second TOTP digit field, but no, it’s the first digit of the code being filled.

I have looked at adding a manual “Linked” field to try and hard-match the fieldname, but these can only accept username or password, and not the TOTP code!!

Stumped - can anyone help please?

3

Hi @TenaranJon! I’ve reported your issue to my team internally, but they have not been able to reproduce it so far. If possible, can you please share the site/page where you are experiencing the issue? You are also welcome to reach out to our Support Team directly if you’d rather not share that information publicly. :+1:

1 Like
4

@TenaranJon An autofill issue with a specific site can also always be reported via these forms:

Report autofill issues (mobile apps): https://forms.gle/NcZ2BmLfKH9txCzz8
Report autofill issues (other clients): https://forms.gle/yYVQkepxxLKZ3kR6A

1 Like
5

thanks both
@sj-bitwarden it is indeed a link provided by my employer so not something I’ll share publicly (even though it is publicly accessible I think) - I’ll complete the form @Nail1684 sent over (assuming that goes directly through?) and will provide the URL on there :smiley: