One Time Passwords for Mac?

AriPorad

Hi,

I'm currently using Authy for 2 factor authentication, and I really like it. It's nice because I can get to my codes on my mac, saving me time (https://www.dropbox.com/s/esyyufawjrc8uzw/Screenshot 2015-02-11 19.58.54.png?dl=0). I would like to switch to 1Password for 2-factor, but only if I can get it on my mac.

Is this planned for anytime soon? If not so, why?

Drew_AG

Hi @AriPorad,

I'm glad to hear you're interested in the one-time password feature we recently added to 1Password for iOS and Windows! You'll be happy to know our developers are planning to add this feature to 1Password for Mac as well, although I don't have a timeframe for when to expect that. It's a popular feature and a lot of other users are also interested in it, so hopefully it won't be too long! :)

Nobby

Hi Drew, Is there any update on when the one-time password will be available in 1password for Mac. I am using the Beta version 1Password 5
Version 5.3.BETA-18 (530018) but can not see any option at this stage.

Stephen_C

Hmm, that's odd... The release notes for 5.3.BETA-8 say:

Lucky Friday thirteen, TOTP is here!

I'm not sure why you're not seeing it. It's certainly still there in beta 18.

Edit: try editing and completing a new field. You should then see at the far right (main app) something you can click on to show a dropdown for the field type. That includes one time password.

Stephen

rickfillion

Hi @Nobby,

Currently the process of adding a TOTP secret to 1Password for Mac is a little ugly. We want to make this better. Here's what you'll have to do:

• Edit an item
• Put your cursor in a new custom field, type in any value and hit the return key
• This will officially add the custom field for you, which is what the TOTP will be.
• Now that we have the custom field, you can use the (...) button on the right to change its type from Text to One Time Password.
• Once you've changed its type to One Time Password, you'll get the option of using the QR code scanner, or simply copy/pasting in the otpauth url or secret
• Save the item
• You should now see the current One Time Password along with the timer to say until when it's valid.

I hope this helps.

Rick

AriPorad

Hi @rickfillion,

Thanks for bringing this to 1Password for Mac!

I have two questions though:
1. Does 1Password autofill the totp in the browser?
2. I bought the Mac App Store version, so I don't think I can use the beta (I tried, but it couldn't find my vaults). Do you know when this will make it to the app store?

Thanks!

rickfillion

Hi @AriPorad,

For the moment we aren't autofilling TOTP in the browser. It's certainly something we'd all like to see, but I don't have a timeframe for when that could happen. There's no great way for a Mac App Store user to use our betas without committing to using the AgileBits store version from then on. I'd love for the two versions to share databases, but we aren't quite at a point where we can make that happen. I have vague ideas about when this might make it into the App Store build, but since some of that is out of our control (app review process and all that), I can't say with any level of certainty when that's going to be.

Cheers.

Rick

AriPorad

Thanks!

Drew_AG

On behalf of Rick, you're very welcome! :)

AriPorad

Hey, @Drew_AG & @rickfillion, Is there a way for me to covert from Mac App Store to Agile Bits store (I don't use iCloud, so as long as switching back is a possibility, I'd rather have betas.)

Also, I would like to advocate for filling of OTPs in the browser, it seems (I hope I'm not wrong,) like a fairly easy thing to implement, and it would really improve my workflow.

On an un-related note, is storing your OTPs in 1Password any less secure?

Stephen_C

In answer to this:

Is there a way for me to covert from Mac App Store to Agile Bits store

please take a look at this knowledge base article.

Stephen

rickfillion

Hi @AriPorad,

The knowledge base article @stephen_c linked to is the right place to look for how to convert from MAS to AgileBits Store. Doing that conversion is easier than the inverse. If those instructions don't work, it's likely because you've previously used the AgileBits store version, and you already had a database. In that case you should follow the Starting Over instructions for the AgileBits/Webstore version to clear out the database, then re-run the Agilebits Store version.

Storing OTPs within 1Password isn't any less secure, no. Putting them in 1Password makes it not two-factor authentication though, but simply two-step authentication. Jeff wrote a great blog post that explains the difference.

No need to advocate for filling of OTPs... we all want it. I'm not familiar with the problem exactly as I'm not a browser extension developer, and maybe they've already figured out all the tough bits already. But things are never as simple as they seem. One of the challenges of the browser extension is to be able to understand what kind of form on the website it's looking at. Is it a login form? Is it a password reset form? etc.. Knowing that something is an OTP form could possibly be challenging. Luckily this kind of stuff is what we love to do. Bring on the challenges! :)

Hope this helps.

Rick

adihaya

Thank you all! I can't wait to see OTP filling in later versions. It is one of the most highly wanted features.

Megan

Hi @adihaya,

It's great to hear that you're excited about TOTP filling! :)