February 20, 2018 at 4:44 pm #791
Hi. I logged into https://my.orbitbhyve.com/login and changed my password. The only way I can get back in to control my sprinklers on the web is when I use the new password. However, the app on my tablet still lets me in to control my sprinklers and I have not put the new password on it. I thought this might be a fluke and maybe I put in the password on the tablet and forgot. So I changed it a second time. I opened the app and it still let me right into my sprinkler system.
It’s weird because it seems like once an app is associated with a system it no longer has to check credentials to get in. The bummer if this is not corrected is when I allow a landscaper to have access. If I change landscapers and want to make sure the old one can’t get in I would normally just change the password. With the app the way it is now that would not work.
Can you please look into fixing this?
Android 7.0 tabletSpread the love!February 23, 2018 at 12:07 am #796Josh KirkParticipant
Hey there! Thanks for posting! Yes, we will definitely look into fixing this to make the app more convenient.Spread the love!February 23, 2018 at 2:10 am #799
Hi Meranda. Thanks for reviewing this forum post. The app just updated and it did not change this. My tablet app is still logging in with an old password. This is not a convenience factor, this is a security issue. This is a pretty serious security issue. Thanks for trying to get it fixed.Spread the love!March 8, 2018 at 4:30 pm #843
Hi again. This is a hugely serious bug. I just installed the Bhyve app on my wife’s ipad and my son’s android tablet. I logged into them and they worked fine. Then I logged into the http://my.orbitbhyve.com/ website on my laptop and changed my password. After rebooting all my devices (one ipad and two different android tablets) the app logs in without inputing the new password. This is a huge, serious problem. If someone gets your password you can’t de-authorize their device by changing the password. Wow!!! That’s a big problem. It’s almost as bad as not having a password at all.
I do realize that this is just a sprinkler system, not the nuclear codes for the US. Yet, it seems like this should be fixed. Thanks for your time.Spread the love!March 19, 2018 at 7:08 pm #876Josh KirkParticipant
We realize this is a serious issue and are working to resolve it. Thank you for bringing it to our attention.Spread the love!May 18, 2018 at 2:59 am #1921
Hi MAB. It seems like this problem with logins and passwords still persists.Spread the love!May 18, 2018 at 7:30 pm #1967
Have you tried logging out from the app and then reclogging in with your new password? Also you can change your password in the app. If you select settings and then choose B-hyve Account, and there yo an change your account password.Spread the love!May 18, 2018 at 7:53 pm #1972
Hey Ryan. I’m sure I could log out on the tablet and then I would have to enter the new password to get in, but that is not the issue at hand. Once an app is logged into an account a change of password does not force the app to input the new password. So if I put it on my phone and my landscaper’s phone and then decide to change landscapers I cannot eliminate his access by changing the password. According to your instructions I would have to logout my landscaper’s app. Here’s what it would sound like “Hey landscaper, I know I just fired you but could I please have your phone for a minute so that I can make sure it is logged out. I want to make sure that you don’t reprogram my sprinklers without my notice and cost me thousands of dollars”. Not a great conversation to have. (Yes thousands sounds like an exaggeration but our water bills have been over $300 a month with major conservation so if someone messed with my sprinklers it could easily be very costly.)Spread the love!May 18, 2018 at 9:04 pm #1991
I understand the issue that you are bringing up. Until this issue can be resolved you could try this to prevent future similar situations from arising. Instead of signing in to someone’s account you may choose to grant them access to a device by generating a code. This will give them access to a specific timer not your account, as either a guest(may only look at settings) or a manager(can edit your timers settings). That is done under device sharing in a devices details page.Spread the love!May 18, 2018 at 9:45 pm #2001
Ryan. I really appreciate your help to find a work around. I was looking for the “Device Sharing” on my computer on https://my.orbitbhyve.com , but it is not available there. I did find it in the android app and will try it. Thanks…………Spread the love!May 22, 2018 at 5:04 pm #2109
- You must be logged in to reply to this topic.