unsecured website

Options
ddelavara
ddelavara
Community Member

I'm a newcomer to 1Passport. The very first website I added to 1Password is Zipcar. I logged into my account, 1Password asked me if I wanted to save, and I saved. Now when I attempt to login using 1Password, it takes me to an unsecured HTTP Zipcar website with a warning that this isn't the secured HTTPS Zipcar website where I need to be. So the login isn't automatic at all. What am I doing wrong?

Comments

  • littlebobbytables
    littlebobbytables
    1Password Alumni
    Options

    Hi @ddelavara‌ In each Logins item you can have one or more website fields and these fields are how you associate an item with a particular URL. The one you have stored in your Zipcar entry starts with https (given the error you're reporting) and the s is for secure, that the communication between you and the site is encrypted - never a bad thing when you're transmitting login credentials. I haven't stumbled upon this yet but what's happening is that after passing the URL to your browser you're being redirected to plain http - no encryption. So 1Password is warning you because in its mind that isn't right.

    Is the URL address you have stored in 1Password https://members.zipcar.com/register/? and when 1Password tries to open and fill does the URL in your browser show http://members.zipcar.com/register/

    The odd thing is I've just tried visiting the site and if I try to visit http://members.zipcar.com/register/ (without the s) I get redirected back to https.

    If you can let us know a little more based on what I've described above we should hopefully get you sorted out.

    In general though, if a site doesn't have an https option then editing the website field to remove the s in https would remove the warning but you should be careful about doing so as you're telling 1Password to send your login credentials over an unencrypted channel. You want to think carefully before doing so.

This discussion has been closed.