Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
I definitely want this to be configurable. I don't want 1Password to unlock with Touch ID in all circumstances, as Touch ID has significantly lower entropy than a well-chosen password. Touch ID would be a perfect replacement for a PIN, once 1Password has been unlocked with a master password.

In other words, I open 1Password, type my master password, switch out of the app, then whenever I want to fill a password I use the Touch ID. After a certain amount of idle time (or the phone is locked, etc.), then the master password would be required again.

1Password already does this with their master password and a separate unlock PIN.
 
I am browsing in mobile, why does this vine want to auto play filling up my whole screen without pressing the play button? Not cool.

Edit: not doing it a anymore, not sure what was going on.
 
Last edited:
I definitely want this to be configurable. I don't want 1Password to unlock with Touch ID in all circumstances, as Touch ID has significantly lower entropy than a well-chosen password. Touch ID would be a perfect replacement for a PIN, once 1Password has been unlocked with a master password.

In other words, I open 1Password, type my master password, switch out of the app, then whenever I want to fill a password I use the Touch ID. After a certain amount of idle time (or the phone is locked, etc.), then the master password would be required again.

1Password already does this with their master password and a separate unlock PIN.

I suggest you post your concerns in their forums or send them an e-mail.

Does keychain access and Touch ID make apps like 1password obsolete?
Not at all. 1Password does a lot more than just storing your web logins and credit cards. I store all sorts of sensitive information with it, including security questions, software licences, banking details. iCloud keychain doesn’t work with every website, which makes it useless as a password manager.
 
Hopefully LastPass does something similar.

I conceptually like 1Password but it's just so god damned expensive…
 
Won't apps like this become irrelevant when apps can access keychain? Don't get me wrong I used mSecure on android for a long time before I switched back to iOS, but apple already does this with the web, and if I am not mistaken this functionality was revealed at WWDC. So what is the point of purchasing a app like this when keychain will control it all?
 
Combining two of the new APIs—it looks great!

Yes, looks amazing. I can't wait for the 1Password update -- not having to enter a master password every time I use the app will be awesome. Entering passwords directly in Safari is pretty useful too.

The minute I saw the extensions and TouchID stuff from the WWDC keynote, I've been waiting for this.

Cannot wait!

We cannot wait either :) Glad you all are enjoying this. Stay tuned as this is just the first iteration of it all and things will undoubtedly change and improve before release.

1password is the king.

Hail to the king, baby!

This could get me to use 1Password or LastPass.

I assume you're using Cloud Keychain then? Just curious, you should certainly be using some form of password management. We just encourage all users to use some form of password management, even if it isn't our own.

Excellent, definitely a huge step in the right direction.

Unless I'm missing something, nothing got entered into that login form...

The video is cut short. It definitely fills :)

I assume in this case the user who posted this video (it wasn't us) probably didn't want their email to be visible in a video to the public.

My fingers are ready.

Finger exercises commence! Just pace yourself, no need to strain a muscle early in the beta cycle. :)

This will be amazing, but a little disconcerted by the statement that the device's passcode can also be used to unlock 1password. I would rather have that disabled and have my master password as backup. Don't know if that is possible.

I love 1password use it all the time. However, I question how the encryption works on the backend. The current database is encrypted with your password. How does it work now ? Is my plain text password being encrypted and then the TouchKitID token is used to decrypt that in a chain ?

I hope they release some tech specs on it or I won't consider using that feature.

Touch ID or the device passcode can be optionally used as a convenient way to unlock 1Password, very similar to how the PIN code is used in the current version.

Keep in mind that Apple does not allow developers access to the actual finger print. It can only confirm that the finger print matches or not. To set this process up we do store the user's master password in the iOS keychain. It has two restrictions on it that truly matter. The first is that it stays only on the device and will never be synced to other devices. This data is also only accessible by 1Password, no other applications can see or access this data. That's the big one, the second is that it requires the user to validate either via the passcode or Touch ID to gain access.

It's important to remember that we can't derive the master password from the finger print, we're never given access to the finger print data and only receive a "yes/no" type of response from Apple's frameworks.

As I said, it's completely optional and you can choose to use it or not based on your security requirements. I'm sure our security expert will write up more on this prior to release as things are subject to change.

To answer the question of the device passcode, we can do this because when the master password is stored, it can also be accessed when the device passcode is provided. Again, this is limited strictly to the app that stored it.

I love you 1Password. I mean it. Will you be mine?

We <3 you as well :)

Yeah... I think that video was too short... damn 6 second time limit on Vine.

They should have used Instagram to make a 15 second video.

:)

Yup, pretty sure it was just cut short due to time, or the user wanted some privacy. Of course, the user who posted this could've just used fake credentials.

Sweet, now apply this to user-installed apps :D

Derp, nvm, Touch ID to sign in :p

:) Hopefully we can go a few steps further here.

The PIN code is currently optional in 1Password for iOS 7. I assume that this will remain so. They wouldn’t create such a weakness for those devices that don’t have Touch ID, I’m sure.

Upvote!

It's nice of them to recognize Canada Day like that. All too often, news posted online is so US-centric. :)

AgileBits is actually a Canadian company. While we're primarily a remote company we do have a pretty big presence in Canada, and an office in downtown Toronto. I'm from the US, so, looking forward to fireworks on Friday, but our Canadian contingent is definitely going to have their fun as well.

If you're Canadian, enjoy Canada Day!

Can it preselect the right 1password entry (username/password combo) for you based on url or is that part still manual? Looks much better user experience anyway.

Right now it does require interaction from the user. I'm not sure whether we can take that extra step if there is only a single matching item or not, it may be a limitation of the extension system at the moment.

I wonder how one gets involved in the beta? Would love to test it. iOS 8 developer here, and I bought iOS 1Password because it's brilliant. :)

Edit: Signup link was removed due to immense demand. We're full up, sorry folks.

We may not be able to accept everyone but it's worth signing up if you're willing to test. We would certainly love to hear feedback and receive any bug reports for those having trouble.

Is Apple not going to make this a part of the keychain anyway? Touch ID is starting to look awesome.

I assume at this point that if the device is unlocked then iCloud Keychain is unlocked as well. Beyond that I have no clue what they might do. But, we agree, TouchID is starting to look awesome :)

Holy cow this will be amazing!!

I come from the future, and I can tell you, the future is amazing :)
 
Last edited:
Back for round two! After this I'm heading to bed so I can be up early to answer any other questions you all have :)

This is exactly what I wanted to see. :cool:

Put the cool shades on man, the new and shiny is pretty blinding :)

Does keychain access and Touch ID make apps like 1password obsolete?
Never used touch id, so excuse the question.

Not at all. I think Keychain is a fantastic entry level feature that gives everyone access to strong secure passwords. However, it does run into some limitations. 1Password does a lot more than just store web page logins (admittedly so does Keychain). For advanced users or those who want a bit more flexibility 1Password is a great choice. There will always be a market for it and there are a lot of our good friends at Apple who use 1Password daily :)

The pro and con roundup definitely changes depending on whether you're talking about Mac or iOS. But one big thing is that we do support Windows and Android. So if you're in a multi platform house/workplace we offer more flexibility there. The other is on Mac, if you use something other than Safari, then Keychain won't work for you. We support Safari, Firefox, Chrome, Opera, and a variety of derivatives (and beta/nightly builds of those).

I'd be happy to discuss further though if you have any specific concerns or questions.

I definitely want this to be configurable. I don't want 1Password to unlock with Touch ID in all circumstances, as Touch ID has significantly lower entropy than a well-chosen password. Touch ID would be a perfect replacement for a PIN, once 1Password has been unlocked with a master password.

In other words, I open 1Password, type my master password, switch out of the app, then whenever I want to fill a password I use the Touch ID. After a certain amount of idle time (or the phone is locked, etc.), then the master password would be required again.

1Password already does this with their master password and a separate unlock PIN.

See my previous message above, it does go into some of the security details but if you have more questions we can definitely address those.

Is this a free update?

We'll say more about this in the future. It's still several months away from release so we want to announce all the goodies at once :) Hang in there, as we get closer to iOS 8 release I'm sure we'll post something for you.

Of course, if you have questions please PM me.

Very nice! Headed in the right direction! good, good, good!

I kind of want to respond to this in a Pinky and the Brain kind of way... :)

I suggest you post your concerns in their forums or send them an e-mail.


Not at all. 1Password does a lot more than just storing your web logins and credit cards. I store all sorts of sensitive information with it, including security questions, software licences, banking details. iCloud keychain doesn’t work with every website, which makes it useless as a password manager.

You're welcome to email us or post on our forum if you have feedback. Email link should be in the signature below.

While I try to monitor what's on here, it isn't an "officially" supported support medium so I cannot claim to be able to read everything on here. If it's important to you, get in touch.

1password extension ALONE will make iOS 8 worth the upgrade

That's the kind of positivity I like to hear :)

Hopefully LastPass does something similar.

I conceptually like 1Password but it's just so god damned expensive…

I like to think we're not that expensive in the long term. For example:

1Password 3 was $50 for a single user license. Many got it on sale during it's 6 years worth of free updates :) $50/6 = around $8/yr. We charged $25 for the version 4 update on Mac for users who weren't in the free upgrade period, which was quite generous (all of 2013, when we released in October).

1Password 3 for iOS was a free upgrade for all users who purchased the original version (version 1). That was, what... 4 or 5 years of free upgrades? Many of those again purchased on sale. The upgrade was $7.99 for most who purchased during the over 1 month introductory sale. We did that to get users who wanted to upgrade plenty of time to do so at a discounted price.

That said, it does cost money to provide support and add awesome new features like this :) We try to do everything we can for our users, including answering questions like this on forums that aren't actually our own.

If you're in a tough spot, PM me.

Won't apps like this become irrelevant when apps can access keychain? Don't get me wrong I used mSecure on android for a long time before I switched back to iOS, but apple already does this with the web, and if I am not mistaken this functionality was revealed at WWDC. So what is the point of purchasing a app like this when keychain will control it all?

As mentioned before, there's a lot more than 1Password does than keychain. See my previous reply above for more on that. I'm happy to dig into this more if that answer isn't satisfactory :)

I want it naowwww.

Naowwww? ;)

Edit: Signup link was removed due to immense demand. We're full up, sorry all!

Does require iOS 8, obviously. :)
 
Last edited:
Will extensions like this be compatible with Chrome and other 3rd party browsers?
 
This is fantastic news. One of my longest standing wishes for things I could do on iOS. iCloud Keychain came close to filling that need, but it's way too limited compared to 1Password. I only wish this would work in apps outside of Safari like Keychain will, which I suppose won't be possible since there aren't share sheets on the login screen of apps.
 
I'm really digging the 1Password 4.6.BETA-1 with TouchID support.

You have to continue to use a master password but you can set it to its max so that it's only needed when launching the app every 30-days and the rest of the time you can just use TouchID when launching the app which is all sorts of awesome.

Unfortunately with the Safari plug-in, you need to use your master password every time you go into the browser, rather than just being able to use TouchID. TouchID which is a drag. Hopefully they'll adjust that so they have that same max 30-day window as when launching the app.

The Safari plug-in is pretty buggy with lots of times where it it's blank in fields that should have data. But hey it's Beta 1 of their app so overall I give them TONS of kudos for getting so much right!
 
Looking forward to all the new things coming. iPhone 6, IOS8, Yosemite and now this news. 1Password just keeps getting better. And for the people that complain about the price, give it a try first. Bet you will be pretty happy with what you get for the price.
 
Won't apps like this become irrelevant when apps can access keychain? Don't get me wrong I used mSecure on android for a long time before I switched back to iOS, but apple already does this with the web, and if I am not mistaken this functionality was revealed at WWDC. So what is the point of purchasing a app like this when keychain will control it all?

You'll have to wait. Apples higher ups most likely use it the way you want but they as a company need to keep developers happy and also continue to take their 30% sales cut.

It's the same as the wifi random spoofing that'll be in ios 8. You don't think Steve and co's iPhones didnt do that from day one ;)
 
1Password was the first app that I thought of for a Safari extension AND Touch ID. I never use the built-in app browser, I just copy and paste the password after unlocking with my complex password which takes some time to tap out. I manage a lot of websites for work and my freelance, as well as a plethora of social media accounts that I'm a backup on, databases, and new internet services that I sign up to try. I literally have hundreds of passwords (using the complex passwords in 1Password that are generally over 20 characters) that I could never remember otherwise.

If the developer is still here reading these comments, know that I love your software. However recent versions have had trouble syncing over iCloud, and there is a bug now with several websites (such as Amazon) where the auto fill from the mini browser plugin on the Mac won't go through unless I manually paste my password. Please fix! Thanks.
 
Why does everything these days have to be 'amazing'? A finger print sensor is categorically NOT amazing.
 
Wow, that's quite neat. I use OSX generated passwords for every site I use regularly and I get sick of having to go into settings and find my passwords to log into an app or something. Hopefully Apple can implement something like what 1Password are doing here. Looks super helpful.

Also, I just noticed that MacRumors has new designed smilies so...:D
 
Too many steps, still.

What 4/5 touch events? You're kidding? :rolleyes:

Right now I have to:

  • Boot 1P
  • Type in a 10 digit password
  • Search for the website login details
  • Click 'copy' on the username
  • Double tap the home button
  • Select Safari
  • Paste the username
  • Double tap the home button
  • Tap 1P again
  • Type in a 4 digit passphrase
  • Click 'copy' on the password
  • Double tap the home button
  • Select Safari
  • Paste the password
  • Click 'Submit / Enter'

4 taps opposed to 30 is fine with me.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.