Why can't I copy/paste passwords into the import brokerage logon screen?

[Kipernicus]

Please listen to your customers and fix this awful inconvenience! Like others have said, it adds no security!

[flyaway]

Heather, that is a really poor response and not true at all, assuming TT understand modern password standards.

 Modern password standards and NIST do not agree with you either (https://pages.nist.gov/800-63-3/sp800-63b.html)

Additionally you can't see what you are typing!  Why obscure that??  If I am doing my taxes I am in a secure place!

Do some research and talk consult with experts please.  (real experts, Steve Gibson from GRC would be a great place to start).

if you don't work for TT sorry but please stay in your lane of understanding.

[flyaway]

so correct.  try typing X%!5YfYHb!MSMfZXKm^7%Q5pC5

as a password.  guess we need to start using monkey123 its so much easier to type.

So sad.  guess I need to change software.

[flyaway]

Yes it is so frustrating!  they must not use complicated passwords or care about the pain it causes us!  at least let us see what we are typing in!

[flyaway]

Totally Agree!!

[DonPayne]

Blocking "paste" doesn't add any security!

[DonPayne]

In addition, secure passwords are usually generated by computer, and can include symbols that look similar, depending on the font:

.,;:

l1I!

0O

$S

({)}

[stevekane9]

Great suggestion! I will change my passwords to monkey123. 

Intuit, please fix this!

[gregjohnsonr1024]

This has got to be the stupidest thing I've seen this year.

Generated passwords most often look like 'line noise'.  And are often stored in a password manager.

Yet we cannot paste into the password field?

Wealthfront generated a 20-character 'line noise' app password - yet I cannot 'paste' it in but have to type it in character-by-character.

And worse yet - there isn't a 'view password' option.  So you have to type of 20 characters of random characters - blind.

This isn't a 'security' feature.  It's an 'arrogant software company' feature.

I probably won't do TurboTax next year but something else.  I suggest others don't as well and tell the company why.

[gregjohnsonr1024]

Bull!

When I view the 'import summary' in the app what do I see?   USERNAMES!

So you can quit with the 'we are only doing this for security' line.

[timreed100]

Your answer makes no sense at all, my 2 year old might have responded that way.

This feature does not add a layer of security, it make it LESS SECURE

Your users want this fixed, so fix it. 

Making you software less secure and inconveniencing your users is not good practice

FIX THIS NOW!

[ds--]

NIST recommends that verifiers allow paste functionality!

https://pages.nist.gov/800-63-FAQ/#q-b12

[soveryannoyed]

This is an astonishingly bad design. If this is your thought about security, then I shouldn't be providing the software with my password at all.

Of course having hard to type passwords in a password manager is best practice.