Using biometrics to unlock | Facial recognition (Howdy)

ugafta · April 2021

Hello. Howdy provides Windows Hello™ style authentication for Linux and it would be nice if this was supported under Linux in 1Password.

1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided
Sync Type: Not Provided

Dayton_ag · April 2021

Hey @ugafta, thanks so much for writing in with this feature request! I can't make any promises for future additions to 1Password, but I'n happy to pass this request along to the team. :smile: Let me know if I can help with anything else. :+1:

Dayton_ag · April 2021

As a quick follow up to this post, 1Password works with any PAM-integrated authentication method - we suggest using the PAM frontend that is included with your desktop environment.

ugafta · April 2021

Hey @Dayton_ag somehow I can not get it to work :-\

Dayton_ag · April 2021

Hi @ugafta, thanks for sharing your results - I'm sorry you weren't able to get it up and running.

To confirm, are you having any trouble with using your system authentication system to unlock 1Password, or is Howdy the only aspect that's not working? If you're having trouble enabling 1Password's integration with system authentication I'll be happy to help out, but I won't be able to offer any support for third-party programs such as Howdy.

ugafta · April 2021

Hi @Dayton_ag I am having trouble enabling 1Password integration with system authentication. Any help would be appreciated.
Howdy works, but it does not seem to be recognized as system authentication to unlock 1Password.

Dayton_ag · April 2021

Hey @ugafta,

No problem, I can definitely help with enabling system authentication within 1Password! First, please open a terminal on your device, and paste and run the following command:

cd .config/1Password/settings

This will put you in the directory for the settings file. Next, run this command:

gedit settings.json.

This will open the settings file for the 1Password app, or create one if it does not yet exist. If the file is empty, paste the following contents into the text file:

 {
  "$schema": "https://downloads.1password.com/schema/settings.json",
  "security.authenticatedUnlock.enabled": true
}

This will tell 1Password to use the system authentication service. Once that's done, save the file, and close out your terminal. Then, lock 1Password and launch it again - a fingerprint icon should appear beside the Master Password field. Clicking that fingerprint icon should open your system's authenticated unlock service.

Could you give that a try, and let me know how you get along? Thanks! :smile:

ugafta · May 2021

Hey @Dayton_ag,

I'm using Ubuntu Budgie 20.04.2 LTS with three local accounts and your first command didn't find this directory.

After a search I found all these directories:

/home/<USER1>/snap/1password/31/.config/1Password/settings
/home/<USER1>/snap/1password/32/.config/1Password/settings
/home/<USER1>/snap/1password/current/.config/1Password/settings
/home/<USER2>/snap/1password/31/.config/1Password/settings
/home/<USER2>/snap/1password/32/.config/1Password/settings
/home/<USER2>/snap/1password/current/.config/1Password/settings
/home/<USER3>/snap/1password/31/.config/1Password/settings
/home/<USER3>/snap/1password/32/.config/1Password/settings
/home/<USER3>/snap/1password/current/.config/1Password/settings

Do I need to change this for each user and what is the correct directory to add the settings.json file? It does not yet exist in any of the above directories. Thanks for the help :)

Dayton_ag · May 2021

Hey @ugafta,

Ah, my apologies! Currently, the Snap version doesn't yet provide the system interfaces we need in order to support this feature.

If you'd like, you can install 1Password from terminal, which does support unlock via system authentication - here's how to do so: https://support.1password.com/getting-started-linux/#debian-or-ubuntu

Once installed, you can enable System Authentication in the Settings menu. Click your account name in the top-left corner of the 1Password app, then click Settings. Once there, head to the Security tab, and enable Unlock using system authentication service.

ugafta · May 2021

@Dayton_ag thank you very much and finally it works. After I uninstalled the Snap version and installed 1Password via the terminal, I checked the settings.json. The following line was missing
"$schema": "https://downloads.1password.com/schema/settings.json",
The other one was already included. After that I had the option of fingerprinting :)

Dayton_ag · May 2021

@ugafta:

Ah, excellent! Glad things are up and running for you now. :smile:

aleon1220 · July 2021

Hi everyone, I added the Schema line that was missing
Ubuntu 20.04

{
  "ui.routes.lastUsedRoute": "{\"type\":\"ItemDetail\",\"content\":{\"itemListRoute\":{\"unlockedRoute\":{\"collectionUuid\":\"7GSCGWJ73RH3XCYSDBOQY3FQGA\"},\"itemListType\":{\"type\":\"AllItems\"},\"category\":null,\"sortBehavior\":null},\"itemId\":\"EE\"}}",
  "$schema": "https://downloads.1password.com/schema/settings.json",
  "security.authenticatedUnlock.enabled": true,
  "privacy.checkHibp": true,
  "advanced.EnableDebuggingTools": true,
  "itemDetails.showWebFormDetails": true,
  "ui.itemList.sortBehavior": "{\"sortKey\":\"title\",\"sortOrder\":\"ascending\"}"

But now the System authentication is not available. I guess I have to reboot the system???

Dayton_ag · July 2021

Hey there @aleon1220, are you using 1Password installed via the Snap store, or another method such as through the Terminal?

Could you confirm if authenticated unlock was working before making changes to the settings.json file? Additionally, could you confirm if you're able to unlock your Linux system using Howdy?

aleon1220 · August 2021

He @Dayton_ag the app is NOT installed from the Snap store.
I believe I am using the ppa Ubuntu repos.

Is there an 1Password app log I could tail to obtain more info???

Dayton_ag · August 2021

Hey there @aleon1220, you can find the logs in ~/.config/1Password/logs. If you'd like, I would be happy to help get authenticated unlock working - shoot me an email at support+linux@1password.com, and include a zipped copy of your /logs folder, and I'll be happy to work on it with you. :smile:

aleon1220 · August 2021

@Dayton_ag thanks, man. I have sent the logs in a zip file to the email you gave me. I will mention your tag there.
Here are some possible log locations I found. Unfortunately, I couldn't find any errors or pointers.
I am attaching some pics I took to explain the problem.

less ~/.config/1Password/logs/1Password_rCURRENT.log
less ~/.config/1Password/logs/BrowserSupport/1Password_rCURRENT.log
less ~/.config/1Password/logs/BrowserSupport/KeyringHelper/1Password_rCURRENT.log

Problem

I can use my registered fingerprints to unlock the computer or login but not to open/unlock the 1Password app.

I have attached the pictures showing the behaviour. Pics are below

I am showing what happens when I click on the 1Password fingerprint icon and how I do Linux login.
You can see that the laptop enables the fingerprint scanner for Linux logging.
Doing 1Password authentication asks me for my Linux password and it doesn't enable the fingerprint scanner. :-(

PeterG_1P · August 2021

Hi @aleon1220, just want to let you know that we've received your email message and will plan to continue the conversation with you over there, where we can discuss the specifics of your configuration. Thank you, and our team looks forward to resolving this for you!

aleon1220 · August 2021

Ok. Thank you. Bless you

Dayton_ag · August 2021

:smile::+1:

aleon1220 · August 2021

@Dayton_ag Is fixed now. The solution is as you suggested.
sudo pam-auth-update

then choose
Fingerprint No need to reboot. I rebooted my machine anyway. here is a screenshot for the visual people like me :-)

Dayton_ag · August 2021

No problem @aleon1220, glad we got that working for you! :smile:

ref: DFN-12473-518

Using biometrics to unlock | Facial recognition (Howdy)

Comments

Problem