1Password OTP app for Apple Watch
I’m not sure if this qualifies as a feature suggestion or an entirely new app idea, but I wanted to share it regardless. Considering AgileBits’ expertise in the field, I wonder if you could develop a standalone TOTP app that works seamlessly on the Apple Watch.
I choose not to use the built-in 2FA/OTP feature in 1Password because keeping all eggs in one basket defeats the purpose of using 2FA in the first place. However, the alternatives I’ve tried so far—such as Microsoft Authenticator and Google Authenticator—fall short when it comes to providing a good Apple Watch experience.
Here’s something every developer should consider: for us users, it’s much more convenient to glance at our wrist for an OTP code than to dig out our smartphone (which might even be in another room). When you’re entering OTPs multiple times a day, this small inconvenience becomes a big annoyance.
Currently, I’m using an OTP app from an indie developer because it offers the best Apple Watch support I’ve found, but I’d much prefer to trust a big name like AgileBits. If you were to release a standalone TOTP app that excels at Watch integration—such as showing the OTP relevant to the website I’m currently signing into on my browser—it would be a game-changer and make life so much easier.
1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided
Browser: Not Provided
Comments
-
Hello @maratm! 👋
Thanks for reaching out! Storing your two-factor authentication time-based one-time passwords (TOTP) in 1Password is safe. Without your account password, an attacker is unable to gain access to your login information in 1Password (including the TOTP).
There is some theoretical benefit in having a separate place to store your TOTPs if your thread model includes the compromise your local device. However, a separate app for iOS/watchOS wouldn't help protect you from that threat since you would still be storing 1Password and the separate app on the same iOS/watchOS device. If that is your threat model then I recommend looking into something like a security key (such as a YubiKey) which would provide true two-factor authentication where your password and TOTP are stored on entirely separate devices.
You can read more here: 1Password & 2FA: Is it Safe to Store Passwords and 2FA Codes Together?
-Dave
1