Steal data by an Addon?

vealpool
vealpool
Community Member
edited August 2019 in 1Password in the Browser

Hey,

would it be possible for another extension to come in my 1Password account?
Or the login data to be filled out to steal?

That's the extension I mean:
https://addons.mozilla.org/en-US/firefox/addon/languagetool/

Why does LanguageTool require permission "Access your data for all websites"?

This permission is required to read the text you type into text fields. LanguageTool will read the text you type into multi-line fields. Most single-line fields and all password fields are skipped.


1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided
Sync Type: Not Provided

Comments

  • littlebobbytables
    littlebobbytables
    1Password Alumni

    Hi @blaxxz,

    As you've posted this in the 1Password X section can I ask, are you specifically wondering about the inline menu and/or the extension popup from the 1Password X button or are you more wondering about the 1Password web interface?

  • vealpool
    vealpool
    Community Member

    If it is possible to steal my login information when 1P X fill it in the Form.

    This permission is required to read the text you type into text fields.

    Hope you can understand me. :'(

  • @blaxxz

    Yes, extensions that have the ability to read data from web pages would have the potential to be able to steal your credentials as you enter them, regardless of how you enter them. This means that whether you use 1Password or not (or any other password management tool) this is an attack vector you should consider when deciding which extensions to install. They wouldn't be stealing the data from 1Password, they'd be stealing it from the web page once it is filled in.

    Ben

This discussion has been closed.