Home Community B-Hyve APP Forum Login / password problem – changed password on web – app doesn't care

Viewing 11 posts - 1 through 11 (of 11 total)
  • Author
    Posts
  • #791
    viewofthevalley
    Participant

    Hi. I logged into https://my.orbitbhyve.com/login and changed my password. The only way I can get back in to control my sprinklers on the web is when I use the new password. However, the app on my tablet still lets me in to control my sprinklers and I have not put the new password on it. I thought this might be a fluke and maybe I put in the password on the tablet and forgot. So I changed it a second time. I opened the app and it still let me right into my sprinkler system.

    It’s weird because it seems like once an app is associated with a system it no longer has to check credentials to get in. The bummer if this is not corrected is when I allow a landscaper to have access. If I change landscapers and want to make sure the old one can’t get in I would normally just change the password. With the app the way it is now that would not work.

    Can you please look into fixing this?

    Thanks…………
    Android 7.0 tablet

    Spread the love!
    #796
    Justin
    Keymaster

    Hey there! Thanks for posting! Yes, we will definitely look into fixing this to make the app more convenient.

    Spread the love!
    #799
    viewofthevalley
    Participant

    Hi Meranda. Thanks for reviewing this forum post. The app just updated and it did not change this. My tablet app is still logging in with an old password. This is not a convenience factor, this is a security issue. This is a pretty serious security issue. Thanks for trying to get it fixed.

    Spread the love!
    #843
    viewofthevalley
    Participant

    Hi again. This is a hugely serious bug. I just installed the Bhyve app on my wife’s ipad and my son’s android tablet. I logged into them and they worked fine. Then I logged into the http://my.orbitbhyve.com/ website on my laptop and changed my password. After rebooting all my devices (one ipad and two different android tablets) the app logs in without inputing the new password. This is a huge, serious problem. If someone gets your password you can’t de-authorize their device by changing the password. Wow!!! That’s a big problem. It’s almost as bad as not having a password at all.

    I do realize that this is just a sprinkler system, not the nuclear codes for the US. Yet, it seems like this should be fixed. Thanks for your time.

    Spread the love!
    #876
    Justin
    Keymaster

    We realize this is a serious issue and are working to resolve it. Thank you for bringing it to our attention.

    Spread the love!
    #1921
    viewofthevalley
    Participant

    Hi MAB. It seems like this problem with logins and passwords still persists.

    Spread the love!
    #1967
    Ryan
    Participant

    Have you tried logging out from the app and then reclogging in with your new password? Also you can change your password in the app. If you select settings and then choose B-hyve Account, and there yo an change your account password.

    Spread the love!
    #1972
    viewofthevalley
    Participant

    Hey Ryan. I’m sure I could log out on the tablet and then I would have to enter the new password to get in, but that is not the issue at hand. Once an app is logged into an account a change of password does not force the app to input the new password. So if I put it on my phone and my landscaper’s phone and then decide to change landscapers I cannot eliminate his access by changing the password. According to your instructions I would have to logout my landscaper’s app. Here’s what it would sound like “Hey landscaper, I know I just fired you but could I please have your phone for a minute so that I can make sure it is logged out. I want to make sure that you don’t reprogram my sprinklers without my notice and cost me thousands of dollars”. Not a great conversation to have. (Yes thousands sounds like an exaggeration but our water bills have been over $300 a month with major conservation so if someone messed with my sprinklers it could easily be very costly.)

    Spread the love!
    #1991
    Ryan
    Participant

    I understand the issue that you are bringing up. Until this issue can be resolved you could try this to prevent future similar situations from arising. Instead of signing in to someone’s account you may choose to grant them access to a device by generating a code. This will give them access to a specific timer not your account, as either a guest(may only look at settings) or a manager(can edit your timers settings). That is done under device sharing in a devices details page.

    Spread the love!
    #2001
    viewofthevalley
    Participant

    Ryan. I really appreciate your help to find a work around. I was looking for the “Device Sharing” on my computer on https://my.orbitbhyve.com , but it is not available there. I did find it in the android app and will try it. Thanks…………

    Spread the love!
    #2109
    Ryan
    Participant

    Hello, you can try using our new beta site https://techsupport.orbitbhyve.com/#/ to access the device sharing while on your computer.

    Spread the love!
Viewing 11 posts - 1 through 11 (of 11 total)
  • You must be logged in to reply to this topic.
Spread the love!