Why does 1Password not require a password if I recently used it in a browser?

peter_1pswd

Steps to reproduce the "issue":
1. Install the browser extension
2. Go to a website where you stored your login credentials
3. Fill login form via shortcut
3.1. The extension will ask for your 1Password password
3.2. Type it in
4. Now open the 1Password app: It is unlocked without requiring you to type in your password again

It looks like this is the intended behavior. But how do I disable it? (i.e. always ask for password)

---

1Password Version: 5.4 (beta 22)
Extension Version: Latest
OS Version: 10.10.4
Sync Type: Not Provided

hawkmoth

The extension can't work without access to the main vault, so it doesn't seem surprising to me that if you access it via the extension (or mini) that the main application is also open after that. The mini helper is the mediator of all of this (at least as I understand).

Is there some reason you wouldn't want the main application to open as you're using the application?

peter_1pswd

I just don't want to automatically unlock 1Password. If I need a password from 1Password, I want to always be prompted for the 1Password master password.

hawkmoth

Have you tried adjusting the options in the 1Password preferences? They look like this:

Megan

Hi @peter_1pswd ,

Please let me know if Hawkmoth's post helps. The Security Preferences is where you want to go to lock 1Password down a bit more tightly.

As Hawkmoth mentions above, the main app and the mini/browser extension do share lock settings, so when you unlock one, the other will be unlocked as well.

If you have any further questions, we're happy to help!

peter_1pswd

These settings don't work as expected. I checked all of them, and entered "1" for "Lock after computer is idle for X minutes".

Then I filled a login field in my browser, it asked me for the 1Password password. Then waited 2 minutes, opened 1Password Mac App, and it didn't ask for a password..

EDIT:
Oh, it says "idle".. Is there a way to lock after X minutes, no matter if I use the computer or not? That would be my preferred way.

Drew_AG

Hi @peter_1pswd,

Is there a way to lock after X minutes, no matter if I use the computer or not? That would be my preferred way.

No, the closest thing to that would be "Lock after computer is idle for __ minutes", so the computer itself would need to be idle for that period of time. I can let our developers know you'd like to have a setting to automatically lock 1Password if you haven't used that app for a period of time, although I can't make any promises about whether or not that will be added. Out of curiosity, is there a reason why you would want 1Password to lock itself so quickly while you're still actively using your Mac?

In case it helps, you can use the ^⌥⌘L ( Control+Option+Command+L ) keyboard shortcut to lock 1Password at any time (that should work from any app). It's not automatic of course, but might make it easier for you to make sure 1Password is locked whenever you want it to be.

peter_1pswd

"Out of curiosity, is there a reason why you would want 1Password to lock itself so quickly while you're still actively using your Mac?"
Because I don't know what happens in the following few minutes after I actively used 1Password (which means it can be accessed without asking for my password again).
Someone could quickly grab my computer and would have access to everything.

If there was a way I would completely turn off all "auto login" features, and let 1Password ask for my Master Password every time I want to do something with the app (browser login, access saved items via main app, etc.)

EDIT:
How do you create these awesome quote boxes? :)

AGAlumB

Because I don't know what happens in the following few minutes after I actively used 1Password (which means it can be accessed without asking for my password again). Someone could quickly grab my computer and would have access to everything.

@peter_1pswd: So awesome! You're right of course, and it's heartening to know you're this serious about security. After all, 1Password is a tool and can do a lot to help, but ultimately it's our actions that will ensure that we stay that way. Admittedly, most people want to know how to enter their Master Password less, so that accounts for Drew's curiosity. ;)

If there was a way I would completely turn off all "auto login" features, and let 1Password ask for my Master Password every time I want to do something with the app (browser login, access saved items via main app, etc.)

Well, this may not be what you had in mind, but you could always remove the browser extensions, not use the extension to fill, or simply have a short unlock time across the board.

EDIT:
How do you create these awesome quote boxes? :)

Just add a > to the beginning of the line. Cheers! :pirate: