Why doesn't Evernote support logins via 1Password?
Comments
-
Hi @odysseus,
Thanks for taking the time to write in with this question, and for your interest in using 1Password in 3rd party apps. Apps need to add 1Password support -- we cannot do it for them unfortunately. We provide the code for them to do it free of charge, but the developers of the app need to take the initiative. If you'd like to suggest to a developer that they add 1Password support to their iOS app you can send them this link:
https://github.com/AgileBits/onepassword-app-extension
Thanks!
Ben
0 -
Sorry -- I meant to post to an Evernote forum!
I have to say that I've always found 1P support in third-party apps to be somewhat of a kludge. It does a search based on name (which sometimes doesn't work) instead of locating the precise entry.
0 -
Hi @odysseus,
Thanks for the feedback. If you have a suggestion for how we could handle this better we'd be open to hearing that. Consider though that the 3rd party app has no way of knowing what exactly you've titled your item, what URL you have saved for it, etc.
Unless we forced you to use a specific title for an item in order to use it with an app I'm not sure how we could make this more precise. :)
Ben
0 -
Fair point. Is there the ability for the user to select an entry if the match doesn't find the right one?
0 -
There is not. Just like the Safari extension, and 1Password on Mac & Windows, a login cannot be filled if the URL does not match the site (or in this case the app) you are currently in.
This is actually the search that is performed: a URL search, based on a URL that the 3rd party app provides. For example, for Slack, they request we search for
www.slack.com
.Ben
0 -
Hi @odysseus!
The 1Password extension on iOS actually matches items based upon their URLs. When the developer of the non-1Password app adds 1Password support, they specify the URL 1Password should be looking for. When you're trying to fill items in Safari, we use the URL of the current page to find Logins;
example.com
,example.com/thing
, andthing.example.com
should all show the same Login items.The reason we don't allow users to search for items via the extension in Safari is to help keep people safer from phishing attempts. It's relatively easy to make things look legitimate, but the URL doesn't often lie. There's no way for us to provide two versions of the extension, so we've opted to make things more restrictive but safer.
I hope this helps! Please let us know if you have any other questions :)
0 -
Hi Aleen,
I think you misunderstood me. I wondered why apps that hook into 1P for logins don't allow users to search for logins in case of a non-match. There is no phishing danger here.
0 -
Thanks, odysseus, I think this is perhaps a fair question. I'll pass the feedback along to our extension developer for their consideration. :)
Ben
0 -
Hi @odysseus,
Thanks a actually a very good question. Thanks for asking it!
I wondered why apps that hook into 1P for logins don't allow users to search for logins in case of a non-match.
The 1Password App Extension API is architected around the concept of the Login URL string. Meaning that third party apps need to pass us their URL string via the API, so that the extension will show a list of all the matching Logins available in the user's vault. However, if there are no matching logins in the user's vault, the 1Password extension will display the "Show All Logins" button, which will allow the user search and choose the login.
Hope that this helps :smile:
All the best!
Rad
0