PasswordMaker Forums
Firefox/SeaMonkey/Mozilla/Netscape/Flock Browser Extension => Help and Support => Topic started by: password rookie on October 03, 2005, 09:02:32 AM
-
Ok, I have to say this is probably one of the most frustrating things I have ever done. I jumped in head first and started using this program. Apparently I am doing something wrong, but I'm not sure what? I went into my Yahoo! email account and changed my p/w with the one it generated. Now I'm locked out! I cannot sign in at all because the password doesn't match. Can someone help me or have I lost my email account??
-
Hi,
There are a bunch of us here willing to help you. We just have to figure out what's going on. Can you tell us what settings you used to generate the password? Maybe you didn't change anything and just used the default? What URL did you use for yahoo? yahoo.com or mail.yahoo.com or ???
-
Hi rookie... ;)
Ok, first of all, no, you haven't locked yourself out of your Yahoo mail account permanently, unless the alternate email address you used when you registered is no longer valid and/or you don't remember your birthday and ZIP code when you registered. You can always tell Yahoo to email you a new password.
But, the problem is most likely simple...
Questions:
1. Which version of PASSWORDMAKER are you using?
2. What Browser/version?
3. Are you using the 'Defaults' settings, or did you create an actual account for it?
4. Are you certain you are using the exact same Master Password when loggin in as you used when you created the new Password?
The problem is most likely one of these, but the most important thing isnot to panic - we will figure out what went wrong.
-
heh - Eric beat me to it again...
:unsure:
-
I am using p/w maker version 0.8.7 along with Firefox 1.0.7.
I am using the same master password.
I think that I used the defaults when generating a password although I my have inadvertantly changed something. :(
I have tried many many times to logon using the passwords created with the many different algorithms, to no avail.
I have also tried to get Yahoo to email or reset my p/w, but they are telling me my Birthday and zipcode supplied do not match!
So I'm pretty screwed I guess, unless you guys have anymore ideas.
Thxs.
-
Ok, lets step back a minute...
1. Before you changed your password in yahoo, did you create an ACCOUNT, in the 'Advanced Settings' Accounts Tab? Is there one listed there now for Yahoo?
If so, what do you have in the 'When URL Contains' and 'Use this URL' boxes in the Account Specific Settings this account? Should be yahoo.com for both)
2. Did you have the 'Confirm Master Password' option checked (did you have to enter your Master Password just once, or twice)?
If not, then it is possible you made a typo when you entered it - so you may have to play around with variations.
-
I'm a bit uncomfortable even mentioning this, but the only other thing I can think of is if your Master Password is not one that you use for other things (hopefully you were in the experimentation stage), I would be willing to try to figure this out for you, but you'd have to give me your Master Password and your Yahoo ID. Of course, if I can figure it out, you would want to immediately switch Master Passwords and change your Yahoo Password to the new one PM generates.
I'm not sure what else to suggest... Eric?
-
I'm not sure what else to suggest... Eric?
Yes, I think the key sentence he wrote is this:
I think that I used the defaults when generating a password although I my have inadvertantly changed something.
I think he should delete passwordmaker.rdf (or just install PasswordMaker to a new Firefox Profile). This will give him all the initial defaults.
Rookie, do you know how to do what I just explained? passwordmaker.rdf is stored in %ProfileDirectory%/passwordmaker.rdf where %ProfileDirectory% is defined here (http://kb.mozillazine.org/Profile_folder) by Firefox.
-
Thanks for all your help.
I was able to get Yahoo to reset my password.
However, how can I prevent this problem in the future?
-
I would suggest creating a dummy Yahoo! (or other system) account and get familiar with how PasswordMaker works; specifically, what is meant by "default settings" vs. custom accounts.
Let us know if there's anything else we can help with,
Eric
-
Rookie - glad you got your account back...
One thing the Help Docs is lacking is a detailed explanation of precisely this - the how and why of Custom Accounts; when the Defaults will do, and when (and how) to use Cusom Accounts - and I am in the process of writing it up.
Once I get the first draft done I'll post it for comments/changes...
-
I had a similar problem. Yahoo says I have my birth and zip wrong. How did you get them to reset your password?
-
Remember it was the ZIP you used when you first registered... although I think sometimes their DB gets messed up cause I lost one once too, and I know what ZIP/birthdate I used. I really wish they would just email you a reset link to your alternate email address.
-
I hope rookie replies back, but in the meantime I found this for you:
http://add.yahoo.com/fast/help/us/edit/cgi_feedback (http://add.yahoo.com/fast/help/us/edit/cgi_feedback)
You give them another email address at which to contact you. Years ago they actually had an 800 number in addition to this page (I know because I called it once to get my password reset), but I can't find information about it now...
Just searched the web for it, and found this (http://www.supportsentry.com/forum/printthread.php?t=80&pp=40)
Actual Yahoo! Cust. Support Telephone Number!!!!!!
1-408-349-1572.
They are only open until 6pm pacific time.
I suggest you read the full thread because there other people with this problem posted there...
edit: It's rather funny to see the spread between dates/time of each post. Sometimes months go by before the next...
-
Hi there,
I'm having a similar problem, except that I chose an account I can "play" with, and I keep getting myself locked out of it and have to have them send me a new password to get back in. I can't seem to figure out what I'm doing wrong.
Under the Accounts tab I set up a new Group, and then set up my first account. In the "when URL contains" box I put the base 2nd level domain, and in the "use this URL" box I put the full domain. The login page has a slightly different (longer) address. Maybe the "use this URL" box needs to match the "longer" address?
-
Hi redface,
I'm trying to track down this problem for Eric, and hope you will let me work with you on finding out whats going on. I actually think it may be a weird bug in PasswordMaker that only rears its ugly head under certain specific circumstances, so we may have to try a number of things to isolate it.
First, please try the following...
Get your test yahoo account ready (new non-PM password set up), then change it to a PM password using the method documented here (http://www.passwordmaker.org/help/get-started.xhtml). Just use the PM Defaults for now. Change the Encryption settings to whatever you were using in the Account you specifically set up, but document what these are. Be sure your username is correct, and do *not* put anything in the 'When URL Contains' fields for now.
Next, try to log in using PM, experimenting with the following 4 ways of populating the Password field, and see if you can come up with one or more that work consistently. I have a feeling that after you change the password using PM, one of these ways will work consistently, but I'd like independant verification...:
1. right-click in field > populate with PM
2. Alt-`
3. Enable Auto-Populate and refresh the login screen
4. Select the Password that is displayed on the Account Settings (open PM by either Tools > PasswordMaker, or Ctrl-`) (you can highlight/copy it, even though it is not in an editable field).
Please let me know your results... and thanks in advance for your help!
-
Under the Accounts tab I set up a new Group, and then set up my first account. In the "when URL contains" box I put the base 2nd level domain, and in the "use this URL" box I put the full domain.
Just for clarity, would you mind specifying the *precise* text you put in these two fields?
Was it:
mail.yahoo.com / yahoo.com?
Thanks
-
Hi tanstaafl,
Thanks for offering to work me through this problem. :)
I'll try the things you've set out. In the meantime, the answer to your question is:
In the "when URL contains" box is "deckertechnology.net"
In the "use this URL" box is "http://deckertechnology.net"
-
In the "when URL contains" box is "deckertechnology.net"
In the "use this URL" box is "http://deckertechnology.net"
Ok, just fyi, there is a security issue that has been discussed here (http://forums.passwordmaker.org/index.php?showtopic=448&st=0), which details why this is almost backwards from the way you should use these fields.
In this particular case, the most secure way would be:
When URL contains: /deckertechnology.net/ <- note the trailing slash
Use this URL: deckertechnology.net
I guess this is a good example of a potential issue using the technique described in the above thread that I use:
.domain.com/
If you use this now, and go to a URL that doesn not have the www. preceding the top-level domain name, then it would consider that NOT a match.
What I'm hoping to convince Eric to do is code this so that it recognizes a true sub-domain and/or sub-directory from a fake, automatically. So, in effect, all you'd have to enter in the first field is 'deckertechnology.net', and PM would evaluate it thusly:
*[.]deckertechnology.net[/]*
where the preceding '.' (dot) is the only character allowed (but not required) to immediately precede what is entered, and the trailing '/' (slash) is the only character allowed (but not required) to follow the last character entered, and the asterisks are, of course, wildcards (anything).
Anyway, the thread makes good reading to understand just how these fields are used, and how their behavior may possibly change (for the better).
-
tanstaafl,
Thanks for the info. I understand the better security of adding the [.] and [/].
I haven't been able to get PM to log me in accurately yet. :(
- Right click/populate "worked", but was an "incorrect login".
- Alt-' just beeped at me.
- Auto-populate/refresh did nothing.
- Copy/paste the displayed password resulted in same as right click/populate.
-
Have you read quixin's new post here (http://forums.passwordmaker.org/index.php?showtopic=461)? I'm betting it applies to you...
-
I haven't been able to get PM to log me in accurately yet. sad.gif
- Right click/populate "worked", but was an "incorrect login".
- Alt-' just beeped at me.
This is important:
What OS (Windows? Linux?)?
What version (Windows 2000? 98? XP?)
It should not just 'beep' at you... or are you hitting three keys instead of just the two (ALT and ')?
- Auto-populate/refresh did nothing.
? You mean, when you refresh the login window, with Auto-populate enabled, you do not get the Master Password Prompt window?
- Copy/paste the displayed password resulted in same as right click/populate.
Ok, I'm curious to see if quixins post sheds some light on this for you - if it doesn't, I'll go create an account there and try it myself... I would have done it already but I just got slammed this weekend and today - I really shouldn't even be posting this message...
-
quixin's new post
I'm thinking this is real close to home. The answer's gotta be in the URL, but I'm just not seeing it...
After deleting the existing PM account for the page, I went back to the login page, carefully determining the EXACT address. Then I set up a new PM account and password. Then I went to the "change password" page, which is on a different URL. I changed the password using the password which I had generated on the actual login page. Then I logged out and returned to the login page (matching up the exact URL with the one used to set up the password), where I got an "incorrect login" message.
I use WinXP Pro. And I just hit Alt and ' - nothing else. But I had already changed that function from whatever the default is. I won't remember that function in the long term, so I turned it off. I turned it back on before trying your suggestion (I set it on "populate empty fields only").
As soon as I type in a user name, it changes the password, even before I enable auto populate! And what about the box called "modifier" - how does that relate to all this?
-
I have also tried having PM use the exact URL of the actual page where I changed the password. Still incorrect.
-
redface, Do you have a high speed connection? I'm going to do a video that shows the processs of setting up an account and then logging into it. If your on a high-speed connection I will just provide a link to the video.
-
We are on low-end broadband here - a link will be fine. :)
-
As soon as I type in a user name, it changes the password, even before I enable auto populate!
The username field affects the password so that if you have two accounts on the same site (e.g., redface1 and redface2 on gmail.com), then you can generate different passwords for each.
And what about the box called "modifier" - how does that relate to all this?
This field is completely optional. All it does is change the generated password. One of its values is for sites which expire passwords, requiring you to change them periodically. You can leave all other settings alone but change this "modifier" field to create a new generated password.
-
re:
The username field affects the password so that if you have two accounts on the same site (e.g., redface1 and redface2 on gmail.com), then you can generate different passwords for each.
I was trying to follow the directions to #3 below:
Next, try to log in using PM, experimenting with the following 4 ways of populating the Password field, and see if you can come up with one or more that work consistently. I have a feeling that after you change the password using PM, one of these ways will work consistently, but I'd like independant verification...:
1. right-click in field > populate with PM
2. Alt-`
3. Enable Auto-Populate and refresh the login screen
So if I understand correctly, if I choose to auto populate, I have to set up a whole new password w/PM to test this theory...
-
redface, I think its better not to worry about the auto-populate yet. Lets first get acquainted with the basics. The following link will provide you with a quick video that shows changing your password on deckertechnology.net". I'm hoping you recognize the screen once you see it. I didn't show the login sequence, just the page where you change your password. After I create an account in passwordmaker I also show how to login to the account using PasswordMaker.
http://www.savefile.com/files/8782719 (http://www.savefile.com/files/8782719)
I hope you have the codec to view that avi.
Hopefully those steps show you how to do the same with your own settings. Give us an update once you try it.
And what about the box called "modifier" - how does that relate to all this?
This field is completely optional. All it does is change the generated password. One of its values is for sites which expire passwords, requiring you to change them periodically. You can leave all other settings alone but change this "modifier" field to create a new generated password.
I asked Eric this some time ago when it was the counter and he gave a much longer explanation (back when he had a little more free time and a shorter request list) You can find that here (http://forums.passwordmaker.org/index.php?showtopic=20).
Good Luck.
-
quixin, thanks for the awesome demo! dunno if it's just my rig here, but the video is extremely blurry. Hope it's just me. Tried to do a screenshot, but HoverSnap doesn't seem to like video overlays...
-
but the video is extremely blurry.
I guess I should have laid off the compression. I tried to make the file as small as possible.
-
Hi there,
Yep, the video was awesome, alright - how'd you make it??? Thanks so much for taking the time and effort to do it. I really appreciate it.
For the most part, I had followed those directions pretty closely, with minor differences which I doubt changed the outcome (e.g. putting "Decker Technology" in the "name" field rather than pasting in "deckertechnology.net")
I watched the video and followed the directions exactly, and STILL got locked out! Can you believe it?
I've uploaded three screenshots here: http://savefile.com/projects.php?pid=932217 (http://savefile.com/projects.php?pid=932217)
The first is a screenshot from the video, the second is a screenshot of the same step on my computer, which shows that the "uring URL" box says "[none - click account settings to set]", and the 3rd screenshot shows a different page for changing the password at deckertechnology.net. This page is where I concentrated my efforts to change the password (it's under >forums >profile), although I also tried on the page used in the video.
-
I see you are using the NoScript extension. The last screenshot indicated that site was 'partially allowed'. I wonder if NoScript is blocking the password from even being changed to the new one?
BTW. ImageShack (http://www.imageshack.us/) is way better for hosting images.
-
Ok... here's the problem, but I'm not sure whats causing it...
I just registered, and had PM generate the initial password - registration was successful.
Next, I simply tried to login - no go...
Nest, I checked the 'Welcome' message, and lo and behold there was the password it said I used - but it was NOT what PM generated.
What PM generates for this URL (with my settings) is:
BZ`k'KPjHg}<
The password in the email I received is:
BZ`k'KPjHg}<
Now here's the weird part...
Once I had activated my account per the instructions in the welcome message, I WAS able to log in using the FIRST (correct) password.
redface - did you activate your account after creating it?
I didn't toubleshoot further, because I'm pressed for time... but I don't think this is a PM bug..
-
I see you are using the NoScript extension. The last screenshot indicated that site was 'partially allowed'. I wonder if NoScript is blocking the password from even being changed to the new one?
I actually included that in the screenshot on purpose, so you'd know I was using the extension. The only scripts not being allowed are "localhost", which wasn't an issue until the last update of the extension - now I get the partial blocking on all pages. :(
What PM generates for this URL (with my settings) is:
BZ`k'KPjHg}<
The password in the email I received is:
BZ`k'KPjHg}<
Yes, indeedy, that is odd.
did you activate your account after creating it?
This is a long-standing account. I log in frequently.
-
What PM generates for this URL (with my settings) is:
BZ`k'KPjHg}<
The password in the email I received is:
BZ`k'KPjHg}<
This is excellent information. What's going on is that somewhere -- either in PasswordMaker or in deckertechnology.net -- XML special characters are being replaced with their equivalent XML entities. The list of these special characters are:- > equals >
- < equals <
- & equals &
- " equals "
Redface, does your password use any of these characters? I'll do some testing to see if I can determine if this is a PasswordMaker bug or not.
-
The last code PM generated for this site (since replaced at my request) was: d=xzv=#TIP,+YFX
Does that thicken the soup?
-
the second is a screenshot of the same step on my computer, which shows that the "uring URL" box says "[none - click account settings to set]"
This is suspicious to me...
You did say that you set up a Custom Account, right?
Are you sure the URL is not what is causing the confusion? If you generate a password using a certain URL, you have to use the same URL when accessing the account.
-
I'll do some testing to see if I can determine if this is a PasswordMaker bug or not.
I did the testing, and PasswordMaker seems fine. I suspect deckertechnology.net doesn't work with < and > in passwords, and perhaps other characters.
-
I did the testing, and PasswordMaker seems fine. I suspect deckertechnology.net doesn't work with < and > in passwords, and perhaps other characters.
Maybe you missed the following comment of mine in a previous message...
Once I had activated my account per the instructions in the welcome message, I WAS able to log in using the FIRST (correct) password.
The password in question is:
BZ`k'KPjHg}<
which does contain a '<'...
-
You did say that you set up a Custom Account, right?
Yes. I have created and deleted several custom accounts, figuring if anything was wrong with it, I'd have a fresh chance if I deleted it and started over.
-
Can you provide a screen shot of your Account Settings for that Account?
-
tanstaafl,
I've got two PM screenshots for you, but savefile's servers are full and I can't get them uploaded right now.
I went to the ImageShack site recommended by quixin, but was uncomfortable with their privacy policy, not finding a statement about info sharing or how to opt out of it, so declined to register there...
I'll keep monitoring savefile...
-
How about Flickr (http://www.flickr.com)? Some people on these forums use that.
-
Maybe I did this the hard way, but here is a link to each of the screenshots:
http://www.flickr.com/photos/86449803@N00/51970825/ (http://www.flickr.com/photos/86449803@N00/51970825/)
http://www.flickr.com/photos/86449803@N00/51979517/ (http://www.flickr.com/photos/86449803@N00/51979517/)
-
Hi redface,
You have to make the fotos "public" on Flickr. We can't see them right now because you have them set to "private" (I think that's the default).
-
There is another way, if you don't want to do that. Go to each photo. Above it there should be a button that says "all sizes." Click it.
This will take you the actual photo. Copy the url in the first (?) blank and post that here.
-
OK. Let's see if this works:
http://www.flickr.com/photo_zoom.gne?id=51970825&size=o (http://www.flickr.com/photo_zoom.gne?id=51970825&size=o)
http://www.flickr.com/photo_zoom.gne?id=51979517&size=o (http://www.flickr.com/photo_zoom.gne?id=51979517&size=o)
-
Hold on - those require a sign in. I've made them public now, so the original links should work.
-
the second is a screenshot of the same step on my computer, which shows that the "uring URL" box says "[none - click account settings to set]"
This is suspicious to me...
I still think this is your problem, and here's why...
When I open PM, and then open one of my Custom Accounts, the 'Using URL' box (back on the main PM Advanced Settings window) shows the URL that I have defined for that Custom Account, NOT "[none - click account settings to set]". Unless this a NEW Account that you had not saved yet.
Your screenshot does indeed show "[none - click..." ]... were you in the process of creating this account when yo captured this screenshot, or did you simply open your existing account?
I also recall what you said here:
The first is a screenshot from the video, the second is a screenshot of the same step on my computer, which shows that the "uring URL" box says "[none - click account settings to set]", and the 3rd screenshot shows a different page for changing the password at deckertechnology.net. This page is where I concentrated my efforts to change the password (it's under >forums >profile), although I also tried on the page used in the video.
The *only* time it should say "[ none - click... ]" is when you are creating a NEW account, and BEFORE you have saved it. Once you have saved it, when you open the Account Settings for that Account, the 'Using URL' box back on the main PM Advanced Settings window should display the URL that you have defined in the 'Use This URL' box in your Custom Account Settings. If it is not, then that is your problem (but what is *causing* it is a different story).
-
One difference between the settings I used in the video and your settings is I did not use any special characters, only standard. That could be the key.
-
redface, just click "OK" on the dialog named "PasswordMaker Account-Specific Settings" after you've filled in the fields (like When URL Contains and Use This URL).
-
were you in the process of creating this account when yo captured this screenshot
In PM? Yes. I thought starting fresh with a new account would be the best way to ensure it was being created correctly.
I'm in! Problem is, I don't know what I did different this time: I created a new account in PM, and then closed the window. Then I logged in to the site and changed the password using the "populate with PasswordMaker" option, logged out, and used the "populate with PasswordMaker" option again when I logged in, and voila, it worked. Seems like I've done the exact same thing several times already... :unsure:
With all this hassle to get a working password for one website (while not qualified to write a book like some people on this website ;) , I'm not an idiot, either), I'm a little hesitant to proceed... I guess I'll proceed with caution.
Thanks everyone, for your help.
-
were you in the process of creating this account when yo captured this screenshot
In PM? Yes. I thought starting fresh with a new account would be the best way to ensure it was being created correctly.
You are correct - but what you missed was that you haven't *created* the account *until* you close the window (click 'OK').
I'm in! Problem is, I don't know what I did different this time:
Yes you do - you just said so below:
I created a new account in PM, and then closed the window.
You *closed the window*, thus saving the Account.
-
Yes you do - you just said so below:
I created a new account in PM, and then closed the window.
You *closed the window*, thus saving the Account.
I closed the window each time I created the account. Really I did! (see below)
OK. I've tested this out until I can consistently lock myself out or not, and here are my findings:
Each time, I started by deleting the account in PM and starting over. I logged into the DT account and navigated to the account info page. The URL of the account info page is of course different than the URL of the login page. This has to be related to why I had such a problem.
If I type "http://deckertechnology.net" into the "when URL contains" and "use this URL" boxes, click OK, populate the change password fields with PM, and logout, I am locked out of the account. Likewise if I copy the password to the clipboard and paste it into the change password fields.
However, when I copy and paste the URL of the account info page into the "when URL contains" and "use this URL" boxes, I've got an incorrect URL. If I whittle it down to "http://deckertechnology.net" by highlighting and deleting the extra characters, click OK, populate the change password fields with PM, and logout, I can log back in with no problem. This also works if I copy the URL from the main page and then paste it into the boxes while creating the PM account while on the account info page.
So! There you have it.
-
Redface,
I followed your steps on deckertechnology.net (whose site is that, anyway???) and got a similar--but different error. I think you may have found a bug in passwordmaker's context-menu "Populate With PasswordMaker" option, but I also found a bug with their website.
Try this:
In passwordmaker, goto Advanced Settings->Global Settings and check "Show all passwords on web pages as clear text" (although I think it's called something else in 0.8.7) -- tanstaafl, can you tell me what that checkbox is named?
Now copy and paste your PasswordMaker-generated password into their account info page (there are two boxes there, for confirmation). You'll be able to see what gets pasted there instead of "******"
Now when have auto-complete in PasswordMaker checked and refresh that page, the password fields both get populated correctly. I can see them instead of **** and they're correct.
So far so good. Clear those fields and try populating both of them with the "Populate With PasswordMaker" context-menu (right-click) item. For me, the first field gets populated with my username (I entered a username in my account-specific settings), NOT my password. Anyone else experience this?
Now here's the website bug: in PasswordMaker, make sure you're using a funky character set for this account. For example, choose the first character set from the Characters drop-down box. The password I'm generating is H+*\w!cQ-)ZJ. Put this password in both password boxes and click Submit. The site comes back with this error: Both passwords are different. They need to be identical.
Fun stuff!
-
"Show the contents of password fields hidden with asterisks on webpages"
-
So far so good. Clear those fields and try populating both of them with the "Populate With PasswordMaker" context-menu (right-click) item. For me, the first field gets populated with my username (I entered a username in my account-specific settings), NOT my password. Anyone else experience this?
gah! I did see this, and meant to report it... and I just confirmed it again to be sure...
Now here's the website bug: in PasswordMaker, make sure you're using a funky character set for this account. For example, choose the first character set from the Characters drop-down box. The password I'm generating is H+*\w!cQ-)ZJ. Put this password in both password boxes and click Submit. The site comes back with this error: Both passwords are different. They need to be identical.
Confirmed... I got the exact same thing...
-
Both passwords are different. They need to be identical.
Yes. I got this error message earlier this week as well. However, when I changed the password on the profile page (click on forums to find the profile page), I didn't get that error.
Clear those fields and try populating both of them with the "Populate With PasswordMaker" context-menu (right-click) item. For me, the first field gets populated with my username (I entered a username in my account-specific settings), NOT my password. Anyone else experience this?
Yes. Also,
1) When I had the "automatically populate uname & password fields" box checked early on in this process, it entered my uname into EVERY FIELD on the acct info page. And
2) Just now, when I went to login and used "populate w/PM", it entered my uname in the uname field, but also entered my uname in the pw field. I had to copy the pw to the clipboard and paste it in. It wasn't doing that before!
-
Just now, when I went to login and used "populate w/PM", it entered my uname in the uname field, but also entered my uname in the pw field. I had to copy the pw to the clipboard and paste it in. It wasn't doing that before!
I can fix this shortly.
When I had the "automatically populate uname & password fields" box checked early on in this process, it entered my uname into EVERY FIELD on the acct info page.
I don't think I can fix this because PasswordMaker has no way of knowing which field really is the username. It's taking educated guesses.
-
I don't think I can fix this because PasswordMaker has no way of knowing which field really is the username. It's taking educated guesses.
NP. It's a feature I personally probably wouldn't use much anyway - I don't like automating things too much.