2FA input field needs focus

  • I’m probably just screaming into the void about this, since I don’t have a paid license to contact Wordfence support directly, but… here goes.

    I have several sites running Wordfence 2FA on login. It seems to work very well, but there is one extremely annoying glitch.

    When the login screen switches from the username/password fields to the 2FA input field, it doesn’t focus on the field. I tend not to notice this (and always forget, since 2FA is a hassle and I’m impatient), because as soon as the screen updates, I grab my phone to open Google Authenticator.

    Then, I type the code. Only the code doesn’t get entered in the field.

    It would be bad enough if that were the end of the story, but what’s actually happening is that the password field is still on the page, just hidden, and still with focus. So now I’ve just typed the 2FA code into the password field. My browser wants to save the new password, and hopefully I manage to be patient enough to not accidentally click yes.

    Now I have to start the whole login process over.

    Yes, maybe I have developed some bad habits and if I were a bit more “present” as I’m doing these things, I wouldn’t fall into this trap again and again and again. But it happens. And the only thing that would need to change to fix that is for Wordfence to switch the browser focus to the 2FA field when it appears on the screen.

    Please make it happen! Thanks in advance.

Viewing 3 replies - 1 through 3 (of 3 total)
  • Thread Starter room34

    (@room34)

    Disregard; I see this issue was already raised here and I added a reply to that thread.

    Plugin Support wfpeter

    (@wfpeter)

    Hi @room34,

    It’s still best to let us know separately as similar problems could have different causes for different users. In this case it does sound the same, although I’m not sure which password manager was in use.

    I just ran some tests and was unable to replicate the behavior. The focus automatically switched to the 2FA input without further clicks or input of any kind on my part. I am not using a password manager’s automatic form-filling login. If you’re using a browser extension for this, would it be possible to temporarily disable it, or use Safari’s Private Browsing mode (if extensions are set to be disabled when private browsing) and see if the same behavior continues? You could possibly also try manually filling the form if password management cannot be disabled to see if the focus changes in that scenario.

    Many thanks,
    Peter.

    Thread Starter room34

    (@room34)

    I’m using Apple’s Keychain/built-in Passwords app. I don’t have any extensions installed in Safari. (Also for what it’s worth there are no console errors.)

Viewing 3 replies - 1 through 3 (of 3 total)
  • You must be logged in to reply to this topic.