messages agent, com.apple,icloud and others want to use 1password

JPinter

When ever I start my iMac I get nag screens asking for different agents to use 1Password and I need to enter my password. I think the problem is that I have a separate password for my computer, a different password for Apple iCloud, and a different password for 1password. I don't want to use the same password for everything. I've tried for months browsing different forums and trying all sorts of fixes but nothing works. I've also tried searching these forums but if it was addressed I didn't use the proper search criteria. Any help?

---

1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided
Sync Type: Not Provided
Referrer: forum-search:messages agent wants to use 1password

JPinter

Using latest update for v5 on Yosemite v10.10.5.

littlebobbytables

Hello @JPinter,

I would very much like to understand what seems to be asking about 1Password. I too don't reuse passwords and so my Master Password is quite different from my OS X user account password and my Apple ID. I don't get any messages about 1Password though beyond it asking to update. As such I'm not sure what is asking and without knowing I am concerned. It could be nothing untoward at all but we air on the side of cautious here as I'm sure you can understand. Assuming they reveal nothing personal at all could you take a screenshot of these requests so we could see what is asking in the hope that we can understand why.

JPinter

Thanks for replying. The messages I get are shown in the screen shots I've attached. If I click cancel then they keep cycling thru until I put in the password for 1password into one of them then everything works normally. I think it has something to do with using 1password keychain but the log in keychain uses my computer password and not my 1password to boot up.

littlebobbytables

Hello @JPinter,

Okay, that's very weird. If you were a user of a really old version of 1Password I think I could rationalise this but we're talking 1Password 2 here and you're currently on Yosemite. This seems unlikely.

What you seem to have is an additional OS X keychain. Normally you have four keychains in OS X

• login
• Local Items
• System
• System Roots

Now the login keychain is linked to your OS X user account, well normally it is, and when you log into your account that unlocks your login keychain and keeps it unlocked so OS X can use the contents. It is possible if you go down certain emergency routes where OS X doesn't change the password to your login keychain and at that point you can be bombarded with requests to unlock, a bit like you are now.

What I can't figure out is why you have an OS X keychain titled 1Password as I'm assuming 1Password 2 isn't a possibility.

The first thing to do is find out what we're dealing with. Can you launch the Keychain Access application please, it's in /Applications/Utilities/ if you're not a Spotlight user. The left hand pane should be split up into two sections and the upper section details all the keychains. I've listed the standard ones above and I'm wondering what you have. It may also be worthwhile to set the Category to All Items (bottom pane of the left panel) and take a look at the entire contents of the keychain titled 1Password. Apple have a KB article on Resetting your keychain in Mac OS X but we want to make sure there isn't anything exclusively contained in there that you don't need to retrieve. What we need to do is try and get you back to the standard 4 keychains and I believe all of those prompts will disappear.

JPinter

I took a screen shot of my keychains. I've tried the first aid in the keychain app and changing the password in login keychain to match 1password but that didn't work. What would happen if I stopped syncing 1password then deleting it from my computer and reinstalling it. I would still have the 1password keychain in my sync folder (or my other computer) to link it back to. I wouldn't loose any data but maybe the two would work together.

AGAlumB

@JPinter: To be clear, 1Password has not stored any vault data in the OS X Keychain since 1Password 3 was released (the transition actually began back in 2008 with 1Password 2.9, and 1Password 3 was Agilekeychain only).

So long as your data is stored in your 1Password vault (and backed up). there's nothing to worry about. I actually ran into a similar issue earlier this year where my OS X Keychain was mixed up and giving me similar headaches. before you resort to deleting anything, try following the steps in this post. It's worked for me as well as others. Please let me know how it turns out! :)

JPinter

Thanks for the reply. Unfortunately that didn't work. Another thought was deleting the login and 1password keychain but I'm not sure if the OS would rebuild it. I also tried to repair the keychain again and change the passwords using the keychain access but that didn't work either.

littlebobbytables

Hi @JPinter,

I'm curious, without going into too much detail (they are public forums) what is in the 1Password Keychain and is there anything in there that isn't contained within your actual 1Password vault? The thing to not lose sight of is that for whatever reason you have this 1Password Keychain it isn't in use by us and it isn't storing your vault. In 1Password 4/5 your vaults are stored in an encrypted SQLite database file that can be found in your ~/Library/ folder, the precise location being dependent on where you purchased 1Password for Mac from. Let's say it doesn't contain anything you don't already have stored in your real 1Password vault. If you were to delete it and then reset your Login Keychain by following the steps laid out by Apple (which basically was delete the old and start anew) then I do believe your Mac would settle on a single Login Keychain and would not create a new 1Password Keychain. That's actually what you want. There are undoubtedly good reasons for having separate Keychains but I think those reasons are probably quite specialised.

If you're concerned at all then a clone of your drive using something like SuperDuper! would alleviate those concerns as you know that with a few clicks you can return your entire system to a pre-oops moment. I'm using VMware, I started just recently but it didn't add a new Keychain to my system and I'm unsure why you would have a Microsoft_Intermediate_Certificates one too. I suggest we start with just the 1Password Keychain and Login keychain though.

JPinter

I started using 1password from the first version. I remember they required making 1password the default keychain and use Dropbox to sync to other devices. What I do have is a file in Dropbox called 1Password.agilekeychain that I sync and it has all my data in it. I do have a Carbon Copy clone that I just updated when all this started. I know just enough about computers to be dangerous so I always keep backups when I muck around in them. The 1Password keychain shown in the keychain's app has quite a bit of stuff (some multi[ple listings of the same thing). I'll try to delete them and make a new keychain. If you don't hear from send help . Actually l'll let you know how it works out.

John

JPinter

I'M B_A_C_k ! It worked great. What is interesting though is that after deleting my 1Password keychain and restarting the computer all the items migrated to the login keychain. I had to log into a few app's that start up and my iCloud mail but now it all works as it should. One thing though is that I have multiple items the same in my keychain now. For example I have 53 entries for iBank login. I certainly haven't changed my password 53 times. Is it possible to delete some entries and not the whole keychain?

littlebobbytables

Hello @JPinter,

53 is a lot. I took a peek at my own Keychain, looking for anything I could safely experiment on and I found I had 12 entries for a single application. Keychain Access will allow you to select multiple items inside your Keychain and if you right click the contextual menu, which does have a delete option, will even say how many items are in the selection. It will ask for confirmation so you don't have to be too worried about accidentally clicking the delete option and then they're gone :smile:

As long as you have any and all iBank passwords safely stored either in your head or in 1Password then I'd say you're safe to delete all 53 entries and then let iBank ask you once more to let OS X store that in your Keychain.

It might be time for me to clean my own Keychain up too :tongue:

JPinter

Thanks for all your help and info. I haven't upgraded to El Capitan yet but I may do a clean install then rebuild my pc from a backup using migration assistant or from my time capsule. That may give me a new keychain. If the old keychain migrates over than I'll try deleting all the entries for an item and let OS X ask me for them again.

AGAlumB

@JPinter: With a fresh CarbonCopyCloner backup at your side, that sounds like great plan! I do believe that Migration Assistant gives you a few options when it comes to what to copy over, so it may allow you to exclude Keychain (though I can't recall for certain).

Personally, I've been really happy with El Capitan. I liked Yosemite, but it was a bit unstable. In both repeats, be sure to let us know how it turns out! :)

JPinter

Migration Assistant copied the keychain faithfully so it is the same as the old one. However, I have to say that is the way to install an upgraded system because some files I didn't even know existed were not copied and i have more space now. After having to add a few passwords that were not copied over the system works smooth and fast. I doubt I'll change anything in the keychain and if it wants all those entries have at it as long as everything works smoothly. I appreciate all the help, it's funny how such an easy fix such as deleting the unnecessary keychain solved my problem but was not readily available while searching the internet.

littlebobbytables

Glad we could rise to the occasion @JPinter and happy to hear things are working better :smile:

AGAlumB

I appreciate all the help, it's funny how such an easy fix such as deleting the unnecessary keychain solved my problem but was not readily available while searching the internet.

@JPinter: Indeed! I encountered that myself. I suspect that information may be hard to come by due to the the trepidation of deleting Keychain entries and the rare nature of this issue.I'm glad to hear that all is well now, but we're here for you if you need us. Cheers! :)