Platform

Platform overview How it works Authorization testing Evidence & reports Private scanning Integrations

Solutions

Security agencies Product teams Regulated industries Partner programme

Learn

Blog Knowledge hub Compare

Resources

Pricing Documentation Help centre FAQ Security & data What we haven’t proved

Company

About Contact Careers Sign in to the platform Start a $199 pilot →

Home / Help centre / Authentication & logins

Authentication & logins

Why is the password field empty when I edit my profile?

Quick answer

The password field is empty on purpose. Cyberlop encrypts stored secrets and never shows them again. A blank field keeps the saved value. Type a new password only if you want to replace it, then save the profile.

Why this happens

Secrets are stored encrypted. After you save them, the app never sends them back to the page. So the Username and Password boxes on the edit form open blank, even though the login is still saved.

This protects the credential. Anyone who opens the form, or looks over a shoulder, cannot read it.

How to fix it

There is nothing to fix if the login still works. To confirm the credentials are kept, look for the notice that says Form credentials stored — leave fields blank to keep it.

  1. Open the profile and choose Authentication.
  2. Find the role. Its Form login block shows the stored-credentials notice.
  3. If the password is unchanged, leave Password blank and save.
  4. If it changed, type the new value in Password. Add the username too if it changed.
  5. Click Save.

The same rule applies to other secrets, such as an OAuth client secret. Leave the field blank to keep the current one.

This is also why the page cannot tell you whether the saved password is right. Only a scan, or a test of the login by hand, proves that. If you are unsure, retype the password once. It costs nothing and removes the doubt, and it saves you from guessing whether an old value survived a recent change to the account behind the login.

Still not working?

If scans fail to sign in after an edit, re-enter the username and password together and save again. Then run a scan and check that the Sitemap shows a role chip on the endpoints. Our page on updating a stored password covers the full change. Still stuck? Write to /contact.

Full tutorial

How to scan behind login in Cyberlop with authentication roles

Step-by-step, with annotated screenshots.

Updated · Back to the help centre

Still stuck?

Tell us what you see on screen and an engineer will help you sort it out.