Re:1Password for Linux
by apozem on Tuesday May 18, 2021 @11:07AM
(#27195644)
1Password in Firefox unlocking the desktop app caught my eye. I'm on Mac and have to unlock 1Password in Firefox completely separately from the desktop Mac app.
[ Parent
| on HN ]
We're bringing this feature to Mac and Windows as well. It's currently in beta and will be coming to the official release soon.
If you'd like to play with this now be sure to install the beta of the Desktop app as well as the beta of the browser extension.
++dave; 1Password Founder
Ohh exciting! I will be installing the beta right away!
Just a warning for people who don't know the grandparent is referring to the extension formerly called 1Password X (now just 1Password in the browser because AgileBits wants you to use that one) which puts ALL OF YOUR PASSWORDS into your browser's memory.
The "classic" 1Password browser extension already unlocked with the desktop app and does not dump your entire vault into browser memory just to fill one password.
Re:1Password for Linux
by jl_agilebits on Tuesday May 18, 2021 @12:23PM
(#27196959)
I think you might have a misunderstanding of how our browser extension works. Just like our desktop app, your password is only in memory if you copy it to the clipboard, fill it in the browser, or reveal it within the app. Your passwords are always stored encrypted on both the desktop app and browser extension, and we make an active effort to keep secrets out of memory. I hope this clarifies things.
- Jackson Lewis, 1Password Developer
Turns out that yes, I thought that the vaults were encrypted as a whole, but according to the security white paper that changed at some point. So you can decrypt individual passwords.
Thanks for taking the time to check out the white paper!
- Ben, 1Password
I noticed this as well and if I am honest it is a tiny bit annoying when the app is open in another workspace it pulls me to it instead of pulling the app to the current firefox instance. This forces me to bounce back to whichever workspace the firefox was on. Not a huge issue though.
KeepassXC has had this feature for years.
Use the "classic" extension, it already does this. And has the added bonus of not putting ALL of your passwords into your browser memory.
Did the classic extension work on Linux? When I switched from MacOS having to use the (terrible) 1PasswordX was one of the things that really annoyed me.