Use Biometric scanner EyeLock Myris to login to any app or website in yosemite?

lasikdr

Eyelock Myris uses video of your Iris to unlock a Mac desktop or laptop. It works well. The problem is that it will not unlock 1Password.... so that I can quickly enter passwords where i need them. I use a PC also and use a fingerprint scanner that uses roboform to fill in passwords. It is seamless. If a web site asks for password roboform asks me to put finger on scanner and the it auto fills password for that site.
eyeLock Myris is the only biotech scanner that i found that works well with Mac Yosemite. It would be outstanding to have 1password enter my crazy long 1password master password everytime i need to log into an app or a web site. I could just look at the iris scanner and log in anywhere. Please work on this ASAP. Thanks!

---

1Password Version: 5.0.1
Extension Version: Not Provided
OS Version: 10.10.3
Sync Type: Not Provided

Megan

Hi @lasikdr,

Thanks so much for the suggestion! Biometrics presents a lot of intriguing opportunities, to be sure. Now, I'm not a security expert, so I'm going to share a few posts from people on the team who know a lot more about this than me.

Our Windows developer shares his thoughts here, in particular:

While biometrics are great as a 2nd factor, they should never be your only factor. You should always combine biometrics with "something you know", which brings us back to your master password.

And our Chief Defender Against the Dark Arts has weighed in as well:

There are ways in which biometrics could be used for encryption, though it involves a special kind of authentication first. TouchID on the iPhone does this. There is a secure module within the iPhone 5s that can only be opened with the right fingerprint (authentication) and it contains, more or less, a copy of your iPhone's unlock code. (The unlock code is used to derive in encryption key.) But this works only because the thing that you authenticate against is built into hardware. So it is a "service" that is deeply wired into the hardware itself.

I should also note that biometrics are not very good authentication systems. Even Hollywood scriptwriters know what is wrong with them. They are vulnerable to replay attacks. Someone lifts a finger print (not nearly as easy as it is in the movies, but it can be done), records an overheard voice command, takes a high quality photo of someone's eye, etc.

Also, unlike passwords, you can't change your fingerprint if you discover that someone has made a copy. So outside of very limited circumstances, biometrics are more gimmick than actual security. (I do think that TouchID in the iPhone is a good thing for what it is designed to do, but it wouldn't be a good thing for other applications.

I hope this gives you a bit of insight into how we're evaluating this new technology, but if you have any further questions or concerns, please let us know!