HACKER Q&A
📣 twitexplore

HN's login page and password manager autofill issue


https://news.ycombinator.com/login

My password manager can't tell the difference between the login username text box and the new account username text box.. It fills in both, then sends an enter command, activating the button for new account.

I am a tester, not a developer, but I observed that the name id on both text boxes are the same. Maybe change the new account username form "name" to "new-acct-username" and the password managers might handle it better?


  👤 Tomte Accepted Answer ✓
Nobody here can do anything about it. Write hn@ycombinator.com. You'll get a reply. The admin is quite responsive to email.

👤 Someone1234
I can see how any password manager would get confused with the HTML of that page. Identically named username/password for create/login, but just happen to be in two different forms with a label to distinguish them. There's no way to determine what is what.

It may be fixable via:

- Set the autocomplete="current-password" and autocomplete="new-password" respectively (this is standard[0]).

May help a password manager figure out what is going on. Unfortunately there's nothing standard like that for username or the login button (maybe there should be?).

[0] https://developer.mozilla.org/en-US/docs/Web/HTML/Attributes...


👤 xwowsersx
I have noticed this on mobile in Chrome with both LastPass and 1Password where it will either only fill in the password for the login and not the username or it will fill the create account section. However, on Firefox desktop, 1Password seems to handle it just fine: https://streamable.com/3y5iku

These autofills never work perfectly IME. One thing that helps is to turn off having it try to automatically send the enter key and, instead, just allow it to fill the inputs so you can check that everything looks correct before you click to login.


👤 dpifke
A tag on that page would also go a long ways towards making it password manager friendly.</h6> </div> </div> <hr> <div class="card"> <div class="card-header"> 👤 nathanaldensr </div> <div class="card-body text-start"> <h6>Works fine in Firefox on Android with Bitwarden.</h6> </div> </div> <hr> <div class="card"> <div class="card-header"> 👤 phnofive </div> <div class="card-body text-start"> <h6>I'm seeing the IDs as acct and pw.</h6> </div> </div> <hr> <div class="card"> <div class="card-header"> 👤 ComputerGuru </div> <div class="card-body text-start"> <h6>What kind of password manager are you using that freely puts passwords in regular ( or unmasked) text input boxes?<p>Edit: typo</h6> </div> </div> </div> <hr> </div> <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.2.3/dist/js/bootstrap.bundle.min.js" integrity="sha384-kenU1KFdBIe4zVF0s0G1M5b4hcpxyD9F7jL+jjXkk+Q2h455rYXK/7HAuoJl+0I4" crossorigin="anonymous"></script> <!-- Default Statcounter code for hackerqa https://hackerqa.net --> <script type="text/javascript"> var sc_project=13078448; var sc_invisible=1; var sc_security="656d49db"; </script> <script type="text/javascript" src="https://www.statcounter.com/counter/counter.js" async></script> <noscript><div class="statcounter"><a title="Web Analytics Made Easy - Statcounter" href="https://statcounter.com/" target="_blank"><img class="statcounter" src="https://c.statcounter.com/13078448/0/656d49db/1/" alt="Web Analytics Made Easy - Statcounter" referrerPolicy="no-referrer-when-downgrade"></a></div></noscript> <!-- End of Statcounter Code --> </body> </html>