How to turn off "This page is unprotected errors" [see post #5 for information]

mirsky

Hi. I had to restore my Mac from a Time Machine backup. Now when I use 1Password, for some sites, I'm getting a message saying:

"1Password warning: This page is not protected. Any information you submit can potentially be seen by others. This login was originally saved on a secure page.

Do you still wish to fill this login?"

Is there a way to turn these warnings off? I can't figure out how to do it. I've looked in 1Password's Preferences but I don't see a way to shut them off.

Thanks!

M.

Stephen_C

I'm just guessing, but it sounds as though you originally saved the login on an https:// page and are now visiting an http:// page on the same site. Is that possible?

Stephen

stevencary

I received this same warning for the first time this morning. Nothing has been changed in my system. Mac 10.9.4, Chrome, 1Password 4.4.1.
The warning has a Chrome logo on it.

Stephen_C

Are you quite sure you didn't save the original login on an https:// page and are now trying to access via an unsecured (http://) page? You can check by going to the login item in the main app, choosing Edit and looking at the full URL of the login you saved.

However, if you are using ⌘\ to login to the relevant page I don't really see how it could take you to the "wrong" page! I'm a little puzzled.

Stephen

sjk

Hi guys!

@mirsky and @stevencary,

That new login warning dialog window you've reported seeing is due to this change in version 4.2.4 of the 1Password extension:

• 1Password will now warn you before filling into an insecure page when the login was saved on a secure page.

This article has more information about it:

1Password login warning

I hope that helps. If you have any questions about this we'll be happy to answer them!

mirsky

sjk, thanks for the article. That helped.

asukulu

Im suddenly getting this message all the time. Im not doing anything different to what I was doing before. Its annoying.

Stephen_C

It may be annoying and I can understand that. However, you should be seeing the message only if you are in effect taking a security risk (i.e., by saving the original login item on a secure site and then trying to use it on one which is not secure). Personally, I'd much rather have the warning than take the risk.

If you really want, of course, you can edit the login item to remove the "s" as the linked article indicates.

Stephen

sjoerdsjoerd

It is indeed annoying, because I get this message about 20 times a day now.
The thing is that I use this login for two different pages; One is http and one is https as you can see in the image attached. The one that has the http url gives the error, even though there is a http in that url (without the s).

I don't see any way of turning this unwanted and unrelated warning off at this moment and if you could do something about this, that would be great.

Kind regards,

Sjoerd

Jasper

Hi Sjoerd,

I'm sorry to hear that you're finding this new security warning annoying. I will let our developers know that you're interested in an option to disable it.

For now, you have several options:

• Split into two separate logins.

  • Create two separate login items, one for the http URL, and another for the http URL.

• Remove the “s”.

  • Edit your saved item in 1Password, and change the “https” on the both saved URLs to “http”.

• Do nothing.

  • If you choose to do nothing, you can simply click “OK” on the warning and 1Password will proceed to fill the login form. You will see this same warning every time you try to use a secure 1Password login (https) on an insecure login page (http).

Brade

Most annoying "feature" ever -- it has rendered a previously awesome app almost useless. PLEASE provide an option to disable this warning. (It's especially dumb when you're on a site that only wants the username first and will take you to a secure page to enter the password, but you still get this warning.) People already know that using the internet is a security risk in and of itself.

Jasper

Hi Brade,

Thanks for the feedback! I will let our developers know that you're interested in an option to disable this security warning.

cborgia

An option would be nice. But as suggested, simply removing the s from (Https) removed the message.

sjk

I'm glad that simple 's' removal works for you, @cborgia. :)

We're still considering an option to disable the warning, too.

ref: OPM-2094

Unknown

This content has been removed.