Looking for BASIC INFORMATION ON SHARING via Email

jkorn

Hello! I'm trying to find out how Sharing via Email works, but can't find any documentation beyond "click here then click there..."

I have questions...

:: How does the generated link function? (onepassword://share/...)

:: What makes the generated link secure?

:: Does the recipient of the link (onepassword://share/...) need to be a 1Password owner? If so, can the recipient of the link add the item to a non-shared vault of their own?

:: What keeps the generated link from being intercepted and used by the wrong person?

Thanks in advance!

Jeff

rob

Hi, Jeff. // @jkorn‌

Thanks for your questions! I'll answer them one at a time.

1. 1Password 4 and above registers the custom URL scheme onepassword:// with the system so that URLs using that scheme will open 1Password and 1Password can process the information they contain.
2. The generated link is ultimately not secure. Since you can send it to anyone, we have to make sure that anyone is able to use it. So you would need to trust your method of communication (email, iMessage, etc). The information is encrypted with a key that all copies of 1Password 4 and 5 already know, so anyone with 1Password 4 or 5 can decrypt the information.
3. So, yes, the recipient needs to be a 1Password user in order for them to access the information. They can add it to any vault of theirs that they'd like.
4. Nothing keeps the generated link from being intercepted and used by the wrong person except for the security of the communication channel that you choose. In the case of iMessage, Apple is very thorough in their encryption of those messages end-to-end. Email and text message may be less secure.

I hope that helps!