Major security flaw - the system keeps re-enabling auto login even after I keep turning it off

[j_a_s]

I've been dealing with customer support all day over this issue and they say they can do nothing but I want to raise it here as well since it's a major security flaw. Paypal is a financial site and therefore security controls should be very strong. I always log out whenever I complete a transaction and I never click the "stay logged in" button that's always presented. Now, every time I log in, I get an email saying "We've made it easier for you to check out with PayPal. Since we recognize this device, we'll automatically log you in so you can skip typing your password at checkout! ... If this is a shared device, or you don't want us to automatically log you in, we recommend that you turn this feature off." I go in and manually turn the feature off. Then the next time I log in to make a transaction, I get the same email again, the feature is re-enabled again, and I have to go in to manually turn it off again. This is totally unacceptable. I'm the only one who should be able to determine if my device is trusted and and if I want to enable auto login. I was told that there's nothing they can do and that I'll simply have to manually disable the feature every time. This is a major security flaw and it's a big deal. I was told that my concern has been escalated but I'm posting this here in the hopes of raising the visibility of this issue. Thanks. 

[vicmowery]

Every time I use a device to login to PayPal, I get an email that says "we recognize this device... blah... we have enabled auto login for future transactions, etc..."  I go and turn it off, but it happens again next time.  I do not see an option to disable it permanently, and there is never an option during the transaction to allow it or not.  Very annoying that Paypal wants to help me like that but doesn't let me decline.   By the way, this "feature" is about a year old or so...never happened before then.

How can this be shut off completely?

Secondly, I found no option to email Paypal about this, only to chat.

[AngiesTyping]

I, too, would like to permanently disable this "feature."  I have multiple PayPal accounts (one for personal use, one for business) and having PayPal "conveniently" decide which account is going to be automatically logged in at a given time has created some significant accounting headaches, especially since I may not see the email that it's happened until much later.  Please, PayPal, tell us how to make it STOP!!!  Just to be clear, I NEVER want this feature turned on for either account.

[vicmowery]

Thank you AngiesTyping for adding your voice to this.  You will notice my original question was posted back in April and yours is the first response in December.  Apparently we are not going to get any help with this.  It just happened again to me today!!!  Very frustrating that it is not optional.

[PayPal_JonK]

Hello @vicmowery, @AngiesTyping, 

Welcome! I'm sorry to hear you're running into some issues with the auto-login feature. Have you tried going into your settings and logging out of all your devices? If not, here are a few steps you may find useful here:

1. Login to your PayPal account. 
2. Click the Settings (gear) icon. 
3. Click Security.
4. Click Update next to Auto Logins.
5. Click Log out of all devices at the bottom
6. Click Done

That should turn off all automatic logins that you may already have saved and unable to turn off. 

I hope that helps!

 - Jon K

[vicmowery]

Hi, thank you for the reply trying to help.  As I mentioned, I have turned it off multiple times, but it keeps automatically turning itself back on.  This could be a major security issue, if for example you use a public or shared PC, it gets "recognized" as one you use often and turns on auto login.  NOT something a trusted platform like PayPal should be doing.

[AngiesTyping]

Yes, @PayPal_JonK , as @vicmowery has re-stated, turning off the auto log-in isn't the problem . . . it's having it STAY OFF and NEVER, EVER log us back into it.  It causes a problem because PayPal doesn't ASK if we want auto log-in turned on, it just DOES it.  Again, and again.  And it is causing problems!  We need to be able to disable the function PERMANENTLY, not just be able to click it back off when the damage has already been done.

[Milonoodle]

MID 2022 and this issue hasn't been sorted.

I live in share house with common logon, turns on my auto logon without asking me. If i'm lucky I notice the email later saying its been turned on.

Dropping paypal, its not secure.

[Frustrated----]

This has been going on for a year + and PayPal has not fixed it.  PayPal obviously knows about the security breach and condones it.  I will be closing my account.  I have lost all faith in PayPal as a secure website to do my financial transactions through. 

[denniz1]

turning this off doesn't work why do they reply with rubbish best just don,t reply

[denniz1]

turning this off doesn't work why do they reply with rubbish best just don,t reply