Pass OTP copying OTPauth URL instead of a generated code

[avxkim]

General information

• MacOS 11.2.1 (BigSur)
• Chrome 88:
• Information about the host app:
  • Browserpass host app version: 3.0.7
• Information about the browser extension:
  • Browserpass extension version as reported by your browser: 3.7.2

---

If you are getting an error immediately after opening popup, have you followed the Configure browsers documentation section?

• Not related

---

Exact steps to reproduce the problem

1. Go to a website protected with 2fa (binance.com)
2. Press CMD+SHIFT+L, choose credentials for this website, login and password filled successfully
3. Now we see, 2FA window with a single input, whenever i try CMD+SHIFT+L and choose OTP credentials, it says: "Error: Error: No fillable forms available for fields: login, secret"

What should happen?

It should paste generated 2FA code

What happened instead?

An error: "Error: No fillable forms available for fields: login, secret""

I can see generated OTP code only when i go in to details by pressing Ctrl+O and manually selecting OTP and copy.

UPDATE

On a vultr.com, it pastes "Login" value instead of a "Secret", so the only way is to go in to details (CTRL+O) and manually copy a secret key from here?

[erayd]

This is not a bug. Autofill is intended to enter your username and password. When you try to autofill on the OTP page, you are receiving that error message because Browserpass cannot find anywhere on that page that a username or password should go.

To enter the OTP code, simply paste it (CMD+V) - it's already been automatically copied to the clipboard during step 2 of your original post. You do not need to select it again.

[avxkim]

@erayd but token is not getting copied after my step 2, login and password successfully inserted, but my clipboard contains no 2fa generated code. What i'm doing wrong?

pass show binance.com

Output:

binance.com
├── email@gmail.com
└── otp

Maybe it's the naming issue?

[erayd]

Aah, I see - the problem is that you have the OTP seed in a separate file. If you put it in the same file as the password, then it will work correctly.

[avxkim]

How can i merge them? my "email@gmail.com" has just 1 string with a password itself and otp contains otpauth url.

[erayd]

Just put the otpauth URL as an additional line in the same file as your password.

[avxkim]

Also when i insert a new otp auth:

zbarimg -q --raw qrcode.png | pass otp insert website.com/email@gmail.com

I can just use the path to an existing entry?

[erayd]

You should use append instead of insert.

The documentation for pass otp can be found here.