When looking at a very simple form where one has to fill out both, the old password, but also double-confirm the new password to be set, the Passbolt browser extension remembers the wrong password to be saved.
Steps to reproduce
- Using a simple form with 3 inputs
[type=password] (see below for code example)
- Fill in the old password
- Use the browser extension and select the first option to "Generate a new password securely"

- Watch the generated password being filled in automatically
- Submit the form, sending the request to the server
- Watch the browser extension popup open

- 💣 The password input now contains the password to be saved contains the old password
Example HTML form
<form method="POST">
<div class="form-group">
<label for="old-password">Old Password: </label>
<input type="password" id="old-password" name="old-password" required>
</div>
<div class="form-group">
<label for="new-password">New Password:</label>
<input type="password" id="new-password" name="new-password" required>
</div>
<div class="form-group">
<label for="confirm-password">Confirm New Password:</label>
<input type="password" id="confirm-password" name="confirm-password" required>
</div>
<button type="submit">Reset Password</button>
</form>
When looking at a very simple form where one has to fill out both, the old password, but also double-confirm the new password to be set, the Passbolt browser extension remembers the wrong password to be saved.
Steps to reproduce
[type=password](see below for code example)Example HTML form