1907172 - App Autofill fills password in username field for Synchrony Bank (com.syf.synchronybank)

Status: UNCONFIRMED

(Firefox for Android :: Autofill, defect)

Description

[Hmmwhatsthisdo]

Steps to reproduce:

• Register Synchrony Bank credential in Sync account (domain synchronybank.com)
• Enable autofill in other apps (Settings -> Logins and Passwords)
• Install+open Synchrony Bank app from Google Play (com.syf.synchronybank)
• Invoke autofill by long-pressing on the username field and selecting Autofill
• Try invoking autofill again by long-pressing on the password field and selecting Autofill

Actual results:

• Autofill inserts password into username field when invoked against username field
• Autofill does not insert anything into username or password field when invoked against password field

Expected results:

Autofill correctly inserts username/password in their respective fields when autofill is manually or automatically invoked

Comment 1

[Hmmwhatsthisdo]

I should add that I can reproduce this on other banking apps (e.g. org.wsecu.n).

Apps like BofA (com.infonow.bofa) work as expected, but this might be because the username is preset by the app and the password field is the only one that accepts input/autofill.

This issue didn't occur on my previous phone running an earlier version of LineageOS/Android (IIRC it was on Android 9) - my current phone is on LineageOS 21, which is based on Android 14/API level 34.

Comment 2

[BugBot [:suhaib / :marco/ :calixte]]

The severity field is not set for this bug.
:matt-tighe, could you have a look please?

For more information, please visit BugBot documentation.

Comment 3

[Jeff Boek [:boek]]

Hey Hmmwhatsthisdo, are you only experiencing this issue with banking apps? Is it working as expected in other types of applications?

Comment 4

[Hmmwhatsthisdo]

:boek I don't recall seeing repros in apps other than the ones I've described.

However, I'm not sure if the correlating factor there is specifically "banking apps" versus "apps that require frequent re-auth" - most other applications I use are one-and-done with auth, whereas financial apps generally expect users to sign in on every launch.

Comment 5

[Hmmwhatsthisdo]

Just confirmed this repros on a stock Pixel 8a running Android 15. Installing the Firefox and WSECU (org.wsecu.n) apps and opening the latter, Firefox prompts to fill passwords into the username field. The real password field renders no inline autofill results, and manually invoking autofill on the password field fails silently with no error presented to users.

This doesn't seem to be a LineageOS problem vs a later-API-version problem. Not sure what the next steps are here.