Using latest version of Firefox on latest version of macOS. WIth latest version of Bit Warden.
Lately I’ve been seeing a less-than-useful popup when I log into web sites using Bit Warden. It contains the TOTP generated by the web site for two-factor authentication. The timing of it makes it redundant instead of useful. It comes up about when I’m already pasting the TOTP into the login widget field, and just gets in the way. And sometimes it persists past login, and is offered for just about any field that needs to be filled in. Ack…
Have been through “Settings”, but don’t see where to turn this popup off. I’m assuming it comes from Bit Warden, since it doesn’t seem to be coming from Firefox or the Messages app.
The “Messages” reference is to the fact that the TOTP code was sent (by the web site) to my desktop computer via the “Messages” app. And there’s no setting for it that I can find in the “Messages” app settings as well.
Nope, not exactly that one, either, but that’s very close. How would you turn off the popup contained in your reply? These are close enough that I may just have a slightly different version due to OS or browser differences…
… and therefore can’t offer you one for “TOTP / Verification code autofill”.
Ergo: if it were that “Fill verification code” suggestion, then you could delete the “authenticator key” in your login item, to not longer get the suggestion. ( Make sure you have a copy/backup of that authenticator key / TOTP seed code, before deleting it!)
Apart from that, I think you could only deactivate the inline autofill menu entirely (Settings → Autofill → un-check “Show autofill suggestions on form fields”) or make that inline autofill menu only visible by clicking the BW shield icon (Settings → Autofill → check “Display suggestions when icon is selected”).
I do have a “premium” account, and I see this in the “Settings” under “Autofill”:
Copy TOTP automatically
That setting was turned on, but turning it off didn’t get rid of the popup as I had hoped. I’m not ready to get rid of autofill yet, even though for most of my web sites I have to hit the “Fill” button on the browser extension. There are a few sites where the login information is actually filled in by Bit Warden without my intervention, which is cool.
I’m not sure what the Bit Warden Authenticator key that you showed above is used for, since I use a different authenticator app (2FAS and G2FA). I don’t use BIt Warden as my authenticator app. So I gather that “Authenticator key” field isn’t used in my case. My understanding there may be wrong.
Anyways, still trying to figure this one out. I may try turning off autofill altogether as you mentioned, and see how that works for me in normal operation. If the popup was better integrated with my workflow, I’d just use it. But it isn’t there when I want it to be most of the time, and is there when I really don’t want or need to see it.
Overall, seems like there should be a setting that just turns off that darned TOTP popup, since that’s really my only problem with Bit Warden at the moment. I may end up switching password vault apps, but I’d really rather not do that. I value the open source nature of this one, and would like to keep using it.
As I tried to say before: if you don’t use Bitwarden’s integrated authenticator (as it’s called) for TOTP codes – and if you even don’t have TOTP seed codes / authenticator keys in your login items – then that popup can’t be generated by Bitwarden.
But if you could make a screenshot of it (redact any personal information before posting it), that probably would make it more clear.
I would recommend that you don’t delay disabling this optional functionality (“Show autofill suggestions on form fields”), at least temporarily — just to be able to convince yourself that the “Fill Code” pop-up you are seeing has nothing to do with Bitwarden. Once you see that the “Fill Code” pop-ups are still appearing after you have disabled “Show autofill suggestions on form fields”, you can re-enable that option in the Bitwarden extension, and take your troubleshooting in a different direction.
Make sure you have a copy/backup of that authenticator key / TOTP seed code, before deleting it!)