1PW context menu in Safari
Hi, I noticed there's a "1Password" menu item in the context menu when you right click on a page. However, that only brings up 1PW when I have the "Always keep 1PW mini running" checkbox enabled in the settings. Otherwise it doesn't do anything. I think if that settings is disabled in the settings, the context menu item should be removed as well since it doesn't seem to serve any purpose.
1Password Version: 5.3.2
Extension Version: 4.4.0
OS Version: 10.11
Sync Type: Not Provided
Comments
-
@pentool: That's a great idea! Unfortunately it isn't possible for extensions to change this on the fly, but it may become possible in the future.
However, is there a specific reason that you're not keeping 1Password mini running? It really is best to, not only for 1Password's functionality, but for security as well, since the XARA research found that it may be possible for one app to pose as another. Keeping mini running mitigates this risk:
1Password and XARA
I hope this helps!
0 -
Well, would it be possible/feasible to add an option in the prefs section to "Add 1PW Menu to Browser Contect Menu" or something along that line...? I usually remember most PW that I use online so I don't really need another service running in the background for that and I can quickly just switch to 1PW when I need something.
0 -
Hi @pentool,
I have to confess, I'm quite curious as to how you're currently using 1Password and the value such an application brings for you. I doubt I could remember even one of the passwords I store in 1Password as the key service 1Password provides is the ability to use extremely strong and unique passwords. The protection this offers is it makes brute force guessing of any single site's password infeasible and should one site suffer an attack, losing an entire list of their users, email addresses and passwords in the process I know that information doesn't allow an attacker access to anywhere else - it limits the damage a single password can do.
There may be a perfectly understandable explanation but just on the surface it seems like you're not fully benefiting from 1Password can do for you and I'd love to understand why.
0 -
Interesting "debate"! :) I think my short answer is, because we are all different and I like blue and you like red (...or whatever your fav color is) :) and so we like different things and we like to use things differently.
I keep battling with Apple about why they can't just allow customizing the left/right arrow keys in QuickTime playa so I can skip forward/backward in a movie or audio. Pretty much ANY media player has this basic functionality. Yet, they stubbornly using the arrow keys in QuickTime for advancing forward/backward by frame instead. Maddening! So for this, I have to use a 3rd party media player. Imagine the frustration! :)
So with 1PW, the story is quite similar. Years and years ago, I stored my passwords in a text file which I have compressed using rar and assigned a password to the rar file. Quite basic, but that was before civilization :-) So imagine the manual labor I had to do when I forgot a password. Unrar the compressed file, then search the txt file for the password I needed. Once I'm done, delete the txt file. ARRGH! You might be screaming at me right now that deleting the txt file wasn't secure! Correct. It wasn't. But then again, I don't have a load of friends or kids, dogs, parrots, or any other living tissue in my vicinity that might otherwise get to the file. And as far as my friends at the NSA go, well, I always have a port open for them on my router so they can check what I'm doing... :)
A few years ago (1.5 to be exact) I switched to a PW manager and used it so far. It was quite basic, and wanted to get something like 1PW with a nice UI and much nicer features but...the 50 bucks was a tad steep, I have to admit. So I saved enough money in the past 1.5 years to consider buying it :)
During the day, I never visit so many websites that I'd need to login 86 times in a 24 period. I do have an Amazon account, for example, but I shop there maybe once every two years. So I use a PW manager to store things, so when amnesia is knocking on the door I can retrieve the information. And since I only need to remember maybe 5 logins that I regularly use, I have to weigh the option whether I really want another service running in the background that I don't need? Yes, I do know about the fact that computers are fast enough today and also have reasonable memory to keep a small service running the background. BUT. Just because I have various compartments in my car, it doesn't mean I use it for storing my coins even though the compartments are big enough.
I like to keep things clean. Don't waste precious clock cycles and memory if I don't need to (...a penny found, a penny earned...) So I don't run 1PW mini in the background because I simply don't need to. When I need to login somewhere, I Cmd+Space into Spotlight, type "1P", press enter, which opens the app, type my password to unlock, then I can immediately start typing the search phrase into 1PW, which shows me the found item(s) in question. Then I hover over the item I need and click/tap "copy". Then I paste it into the appropriate field in the browser.
Yes, quite old fashioned, but keep in mind I don't have to do this often, it also doesn't bother me, and most importantly, if I have to choose running a service in the background for no reason, even if I don't need to login anywhere vs opening 1PW and lookup the info I need, well, I chose the former. My life doesn't really depend on saving 5 seconds off of my daily chores.
All I was wondering about, that you guys already provide the option to keep 1PW mini running or not, so why not provide an option to remove the context menu item as well? If I don't have 1PW mini running that menu item is not usable anyhow UNLESS I open the 1PW app itself. But if I already opened it, I can just as well copy/paste the information from 1PW to the browser. It's really not that hard. And in that case the context menu is not needed. If I have 1PW mini running in the background then yes, I can see that menu item to be useful.
I see things (in general) that it's all about options options options. We all work different ways with different habits. The more options we have the more happier people will be because the app or function conforms to their workflow. As opposed to Apple's philosophy whereby "you don't need options...you just need to learn to use things the way we tell you to".
Anyhow. Sorry for the long chapter :) I hope I've satisfied your curiosity about how I use 1PW. Efficient or not, I am aware of the possibilities (...well, mostly...) but this is how I prefer to use it.
0 -
My complete apologies about all this! I just realized the context menu has to do with the Safari extension and NOT with 1PW itself! I just disabled the Safari extension and the context menu is gone. All is well! :)
0 -
@pentool: Well, I just now finished reading your explanation...and that was pretty awesome. No apology necessary. Thank you! It certainly makes sense from that perspective. :chuffed:
I know I did mention in passing that the context menu was part of the browser extension, but I'm sorry for not being more clear about that! However, I am grateful that you took the time to write that, as it helps us better understand what is certainly a rather unique workflow. After all, most people use 1Password primarily for the browser filling — and many almost never touch the main app!
I will also mention that if you are not using the browser extensions at all, you are not susceptible to the XARA vulnerability, and therefore leaving 1Password mini running is not necessary in your particular case. After all, a malicious app might try to pose as the mini...but if the browser extensions aren't even installed, there won't be anything on the other end for an attacker to connect to.
However, I will say that using the clipboard to copy and paste passwords could pose a risk, but it sounds like you rarely even do this. And of course if your system isn't compromise in the first place, you've nothing to fear. Like lil bobby, I feel strongly that you'll benefit more security-wise by having 1Password create and fill super-crazy passwords for you, but of course it's your prerogative how you use it.
Again, I really appreciate your feedback. If nothing else, it's made me consider a different perspective, and that's always a good thing. Cheers! :glasses:
0
