Skip to content

Wrong account’s TOTP filled during authentification #1852

Open
@9pr19

Description

Expected Behavior

For the same site (in that case Synology DSM) with multiple accounts fill the TOTP field during the authentication with the right account TOTP code.

Current Behavior

Fill with the first account’s TOTP code and not the account with which I try to authenticate.

Possible Solution

Steps to Reproduce (for bugs)

I currently have multiple account configured in KeepassXC for my Synology DSM let say:

  • Monique
  • Michelle
  • Admin
    For each account the field username, url, TOTP Seed and TOTP Settings are correctly setted.

When I try to log into the Synlogy console:

  • KeepassXC-Browser does not automatically detect the username field - hence I activate the auto detect username only option
  • I refresh the page and KeepassXC-Browser now detect the login field and propose to fill in login of my users
  • Next page I have to fill in the password and the Addon select the correct one
  • Next page I have to fill the OTP but here KeepassXC fill in with the first account TOTP account. If I tried to authenticate with Admin it fills Monique’s TOTP code

Debug info

KeePassXC - 2.7.1
KeePassXC-Browser - 1.8.4
Operating system: Win
Browser: Firefox

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Assignees

No one assigned

    Labels

    Type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions