I used to have one of those hooked up to my account but it wound up causing more headaches than it was worth, so I ditched it. I started using LastPass and have loved it. You might want to take a look. It has some multifactor login options that come with it, although, I’ve been plenty happy even without those.
As for the issue, though, let me make sure I’m clear on this. You are saying that with our plugin, if you use the Express button from a product page or the cart page then you cannot login because of the security key step not being provided, but if you check out with Express Checkout from the WooCommerce checkout page then it does work? Even though both methods are using our plugin? Or do you have some other plugin that is working and ours isn’t? I’m a little confused there.
Thread Starter
jjbte
(@jjbte)
With your plugin, I was able to log in properly if I used PayPal Express as just a payment option, meaning I had to enter my billing info before I could go forward with the Place Order button.
If I used the Express button to bypass filling in forms, that’s when the problem occurred.
Like I said, though, this issue exists on the WooThemes website (when trying to purchase extensions, etc.) and with WooCommerce’s own PayPal option. So I guess this is something PayPal needs to fix.
I use Google Authenticator for others things, but PayPal only offers its own security keys for TFA. I use KeePass for password generation/management.
I would imagine the average customer doesn’t use TFA, so it shouldn’t be a big issue. From what I’ve seen, the average customer doesn’t even bother with strong passwords.
That’s odd. We’ll have to look into that. The same code and the same API call is used regardless of where you start the Express Checkout process. The only difference I guess would be that we’re including the billing/shipping parameters in the request when the WC checkout page is used. Not sure why that would make any difference with their system, but it could be the root of a bug they need to be made aware of. I’ll see if I can reproduce it.
I’m agree, though. People hardly use good passwords much less going that extra mile. I highly doubt it’ll be an issue. I haven’t had any other reports about this being a problem if that says anything.
Thread Starter
jjbte
(@jjbte)
Right, it’s not really a big deal. It does sound like something PayPal needs to fix, though. I was surprised when the problem occurred upon using the Express button after login had gone smoothly via the payment option route.
I suppose it’s possible the problem is sporadic and I just happened to have it work properly the one time. I think I had it happen two or three times at the WooThemes site. I tried different browsers and nothing helped. I finally gave up and used a credit card instead.
And, yes, the security keys can be a pain. Because my PayPal accounts are used for business, I feel better having that extra layer of security.
Thanks for looking into this. Since you’re obviously intimately familiar with PayPal, I figured you would have the best chance of figuring this out or at least getting PayPal to look into it. Again, though, it shouldn’t be an issue most of the time, so don’t trouble yourself about it too much. At least I know what is causing the problem, so if I do have a customer encounter the same issue, I’ll be able to tell them the cause.
I’ll be sure to let you know if I can get any updates about it. Thanks for the feedback!
