Blacklist Quick Access in clipboard manager

nicofurla

I ran in a major security issue copying data from Quick Access, since they stuck in my current password manager history list (in this case is Ditto - https://ditto-cp.sourceforge.io/). Ditto has an option to blacklist apps, so I put in there "1Password.exe" and also "1Password-BrowserSupport.exe" but while I'm aware that it's not possible to blacklist the browser extension (so I avoid copying from it), I couldn't figure out how to blacklist Quick Access.
Hope you can help.
Thanks in advance,

Nicola

---

1Password Version: 8.10.16
Extension Version: 2.15.1
OS Version: Windows 10 22H2
Browser: Edge

ag_mike_d

Hi @nicofurla,

Thanks for your message! I understand that you would like to blacklist 1Password's Quick Access. Since Quick Access is part of the 1Password for Windows app, blacklisting the 1Password.exe should do the trick.

In my limited understanding of Ditto, it sounds like you're continuing to see clipboard history copied from Quick Access, is this the case? When copying from elsewhere in 1Password, does those details remain in Ditto?

Please let us know so I can pass these details along to the appropriate team!

nicofurla

Hi @ag_mike_d,
I confirm that if coped from Quick Access, items are visible in Ditto clipboard history, while if copied from 1Password app they are not.
Moreover - I got this one just yesterday - if 1Password app is open, copying from Quick Access is like copying from the app and items are not visibile in Ditto while copying from Quick Access when app is closed results in visible items.
Of course blacklisting browser extension is not possible, since is part of the browser so I avoid copying from it.
It seems like Quick Access is seen as 1Password.exe only if the app main window is open and app running.

ag_mike_d

Hello again @nicofurla,

Thanks for this update and reporting this behaviour!

I've passed you details along to the development team for further investigation. In the meantime, since you've mentioned this important distinction between having the 1Password for Windows app open or not, if you continue to use Ditto, I would suggest ensuring 1Password is minimized when copying from Quick Access.

I'm that I don't have a further update to share at this time, but you can keep 1Password up-to-date and watch 1Password Releases for the latest news about updates and fixes.

Please let us know if you have any additional questions or concerns.

ref: dev/core/core#11749

nicofurla

Edit: @ag_mike_d, today I accidentally found out that 1Password app have to be in the foreground to Quick Access conceal items from Ditto. Otherwise, if 1Password window is open but in the background, items will be visible in Ditto clipboard history.
Hope this can help a bit more.

ag_mike_d

Thanks for the additional update here, @nicofurla - I'll pass that detail along to the team!