twofas / 2fas-android

Source code for 2FAS Android app
GNU General Public License v3.0
915 stars 67 forks source link

Token for Namecheap being created with "Heap" as identifier #53

Open britechguy opened 1 year ago

britechguy commented 1 year ago

On 8/6/2023, when scanning the QR code for Namecheap.com, the entry for Namecheap was created as "Heap." This was attempted two times, and on both attempts the entry was created with the identifier "Heap."

An image is attached, and the bottom entry is the one I've mentioned above. You can log in to Namecheap just fine using the code generated, and I have manually renamed the entry and used the Namecheap logo that comes along with 2FAS, but this obviously should not be how this gets set up.

Also, and I do not know for certain whether there is a connection between these two things, the 2FAS browser extension will not work with Namecheap's website for me. It works just fine elsewhere, so I suspect that there may be some connection.

Device: Xiaomi Redmi Note 11 Pro+ 5G Model: 21091116UG OS: MIUI Global 14.0.3.0 (TKTEUXM) Android Version: 13 TP1A.220624.014 Android Security Update: 2023-02-01

Redacted

2fas-com commented 1 year ago

Thank you for bringing this to our attention. We'll test it, but in the meantime, you can easily edit any Service name.

j7e commented 8 months ago

Also experienced this when adding namecheap. Weirdly, I added quite a few accounts yesterday and all were correctly identified; today, I've had several incorrectly identified, e.g. Stripe is added as Gmail.

KobeW50 commented 7 months ago

Might be related or a duplicate of https://github.com/twofas/2fas-android/issues/103

eldk commented 6 months ago

Hello,

Same happened here when importing Google Authenticator accounts, some service name are not imported/stripped.

In Google Authenticator we have : "service name:themail@domain.tld", after import in 2fas, only "themail@domain.tld" appear in service name. So Its difficult to know which service it is, and, make 2FAS unusable or not 100% confident. The mail may have been used as account identity many times.

Service icon is not created as it have to be : it is build using the 4 last letters of domain : for example "main".

This result in a weak list with a lot of [main] mail.domain.tld lines for which the only way to get them understandable is to edit the list in order they were exported from Google Authenticator.

Thanks,

Eric

app version : 5.3.5 - Android 10