1621599 - Password generator doesn't generate new password in the same session

Status: RESOLVED DUPLICATE of bug 1551723

(Toolkit :: Password Manager, defect)

Description

[Philipp Borchert]

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0

Steps to reproduce:

• enable secure password generator
• go to some webpage that allows you to create accounts with passwords (or maybe just password change page)
• right click on the password input, generate password
• submit the form
• visit the page again
• right click on the password input, generate password

Actual results:

The same password is "generated" twice (as long as you're on the same domain / page).

Expected results:

Every click on "use generated password" should result in a new password.
Not sure if this is a bug or "by design". I noticed it while creating multiple technical user accounts in a backoffice application (one account after another, with page reloads) so I'd consider this a security flaw.

Comment 1

[BugBot [:suhaib / :marco/ :calixte]]

Bugbug thinks this bug should belong to this component, but please revert this change in case of error.

Comment 2

[Matthew N. [:MattN]]

This is currently by design. You can use separate containers or restart Firefox to workaround this.

EDIT 2022-12-20: There are at least 3 cases where this is desirable within a short period of time:

1. Filling password confirmation fields on the same page if we were not able to automatically do so.
2. Filling the same password on the next page
3. The password didn’t save on the change form so you need to fill it on the log in page.
   Bug 1551723 will give the user the option to choose a new password.