[Koha] Warning--lastpass.com

Bob Ewart bob-ewart at bobsown.com
Sat Jul 15 03:09:28 NZST 2017


One of our staff was using LastPass to store passwords etc for 
Firefoxand was getting her login id and password entered whenever she 
was trying to update a user's profile.

LastPass appears to only look at the basepart of the URL and when it saw 
fields for 'Username' and 'Password' on the patron update page, it 
filled in her username and password. "Save"generates a "passwords don't 
match" error.

Looking at Firefox's 'view page source' showed the proper name and 
password (at least the right number of dots). This confused us for a 
long time until we turned LastPass off



More information about the Koha mailing list