The deprecated PassProtect library causes significantly increased loading times for the custom Okta Sign-In Widget.  The custom Okta Sign-In Widget experiences slow loading times when the PassProtect library attempts to check for breached credentials. Removing the PassProtect script from the custom widget code resolves the performance issue.

NOTE: PassProtect does not affect the default Okta-provided Sign-In Widget.

• Okta Identity Engine (OIE)
• Okta Classic Engine
• Custom Sign-In Widget
• Sign-In Page
• Performance Issues

The PassProtect library causes the slow loading times for the custom domain Sign-In Widget. Administrators identify this cause by opening a network trace (browser developer tools > Network) before navigating to the Okta custom domain and locating an entry for passprotect.min.js.

The following network trace example displays the long loading time caused by PassProtect.

How is the slow loading time resolved?

Remove the PassProtect script from the custom Sign-In Widget code and publish the amended widget to restore acceptable loading times.

1. Locate the following code line in the custom Sign-In Widget code:

<script src="https://cdn.passprotect.io/passprotect.min.js"></script>

2. Remove the code line.
3. Publish the amended widget.

Related References

• How to Prevent Your Users from Using Breached Passwords