1password7 companion vs 1passwordX: autofill and security

Daviator

Hello Support team & community,

I am a new member of 1Password and have tested both, the 1password7 app on windows10 with the companion app in Firefox and 1passwordX directly in Firefox. I have 2 question which I could not find any answers to in the forum:

1) Will the in-page autofill and filling options of 1passwordX become available in the companion app in the future?

2) What is "more secure"? The companion app or 1passwordX?
I found a rather old post that password managers that are browser-extensions based, pose a potential security threat because they make use of API's which are potentially reachable for malware (https://www.networkworld.com/article/3183675/stop-using-password-manager-browser-extensions.html). To my understanding, the companion app, to communicate with the 1password 7 app, makes use of an API which is not reachable through the browser/internet.
Of course past security issues has been patched, my question is meant on a level of "security by design".

Thank you in advance for the answers.

Regards,
David

---

1Password Version: 7.4.763
Extension Version: 1.18.1
OS Version: Windows 10
Sync Type: Not Provided

ag_yaron

Hey David,
Great questions.

1. We're hoping to eventually have only one extension that will have all the features of both current extensions combined. We don't know if or when that will happen though :chuffed:

2. Both options are quite secure, in very different ways.

• The companion extension connects to the 1Password extension helper process that is running in the background, which mediates between the desktop app and the extension in the browser in a secure manner, so no 3rd party extension (or even the browser itself) can access it. We also only allow connections with approved browsers by checking their code signatures, so if your browser has been modified in some way, the app will know and will not allow for a connection to be made. You can read more about our security models here: https://support.1password.com/1password-security/

• 1Password X is its own standalone app that works as an extension, and you can install it on any browser that is based on Chrome or Firefox's code base. Its security model is quite different and yet just as secure: https://support.1password.com/1password-x-security/

I hope that answers everything!

Daviator

Hi Yaron,

Thanks for your answers. I could not find the 1passwordX security page. With the links and your answer I have a good overview of the security architecture. The reports of the external audits is what made me switch to 1password in the first place.
Looking forward to the extension that does it all ;)

Keep up the good work!

ag_yaron

I'm glad I could help @Daviator :chuffed:

If you're really interested to know how our products work in and out, you might also be interested in our white paper: https://1password.com/security/#security-white-paper
It is a very interesting read if you're into that.

Thanks for the kind words!