Beta 6 is nearly usable on Windows but needs easier TOTP access

dszp
dszp
Community Member
edited April 2023 in 1Password 7 for Windows

Just tried the Beta 6 on Windows latest version. Since it supports TOTP codes now, I actually exported all my data from 1Password 4/Dropbox and imported into my Families account (thanks for the import date tags so I can clean this out if I need to :-) and it looks like it's got enough features I may be able to use it! I'm also happy to see that my data appears to have imported well, and even with over 1000 items, it's actually pretty speedy. The helper looks and acts pretty nice as well, very impressive, kudos! UI is usable, no way to select default vault visibility for All Vaults and it doesn't look like I can create/edit custom sections/fields from Windows, but for mostly read-only use day to day it's come a long way in a couple months!

The only thing missing so far that might make it hard to use daily is most of my daily-use sites require a TOTP for login. I can't find any way to access the TOTP code other than opening the full 1Password window and searching for the site to copy the code; it doesn't appear in the Mini helper window from the tray icon or the browser dropdown or the shortcut. Would love to see at least a visible display of the TOTP code in Mini, or ideally when I click on the entry to fill or open/fill, it should copy the current TOTP code to the clipboard so I can paste it in correctly. I know all the issues with finding the TOTP field automatically and auto-filling, but displaying or copying the code would make the new Beta version quite awesome...I'm sure it's on the list but here's a really big vote for pushing some method up a bit higher :-)

Bonus, if I switch to the Beta you move 1Password 4 major performance issues like https://discussions.agilebits.com/discussion/67561/extended-unlock-period-for-1password-4-6-0-beta-608-for-windows-10-anniversary-update into "David will stop bugging you about it" territory ;-)


1Password Version: 6.0.184D
Extension Version: 4.5.9.1
OS Version: Windows 10 Pro x64 version 1607
Sync Type: 1Password Families

Comments

  • AGAlumB
    AGAlumB
    1Password Alumni
    edited August 2016

    Would love to see at least a visible display of the TOTP code in Mini, or ideally when I click on the entry to fill or open/fill, it should copy the current TOTP code to the clipboard so I can paste it in correctly. I know all the issues with finding the TOTP field automatically and auto-filling, but displaying or copying the code would make the new Beta version quite awesome...I'm sure it's on the list but here's a really big vote for pushing some method up a bit higher :-)

    @dszp: First of all, thank you so much for the kind words! I'm glad to hear that you're enjoying 1Password 6...for the most part. But of course the better it gets, the more things like a lack of TOTP in the browser really stand out...so we'll just have to fix that now, won't we? ;)

    I can't offer you a timeframe on this particular feature, but I've added your vote to our tracker. It's really a matter of when and not if. Thanks for your patience, and letting us know how crucial this feature is to your workflow!

    Bonus, if I switch to the Beta you move 1Password 4 major performance issues like https://discussions.agilebits.com/discussion/67561/extended-unlock-period-for-1password-4-6-0-beta-608-for-windows-10-anniversary-update into "David will stop bugging you about it" territory ;-)

    Touché! :lol:

    ref: OPW6-431

  • @dszp thanks for the good suggestion, I couldn't help it but to make sure next update have this

  • dszp
    dszp
    Community Member

    drool :-D

  • ntimo
    ntimo
    Community Member

    @SergeyTheAgile looks really nice :O

  • Yes, it does. I can't wait to try it out. We may need to add some kind of UI feedback to let folks know what's going on after the fill.

  • MikeT
    edited August 2016

    Hi @dszp,

    Thank you for this, I was going to find you and ask for your thoughts on the performance, now that we've done some performance optimizations (more are coming in the future).

    I just want to comment on a few things:

    UI is usable, no way to select default vault visibility for All Vaults and it doesn't look like I can create/edit custom sections/fields from Windows, but for mostly read-only use day to day it's come a long way in a couple months!

    Extra settings for All Vaults to exclude certain vaults and the ability to create your own custom fields and sections are coming in a future update. If we managed to impress you with the last few months only, imagine what the next 6 month is going to be like and we have some really exciting features that we're currently planning for the near future.

    As for 1Password mini, you're only seeing the first draft as we've shipped it to the public a few days ago. There are lot of cool updates coming in the next few months to improve it; the ability to view your item's details, auto-save, credit card/identity filling and so many more. When you're viewing the details in the 1Password mini, it'd be like seeing the same details view in the main 1Password app. That's why we focus first on the main app, 1Password mini really is a mini version of the main app as it can reuse majority of the existing code. That means when you view the item's details, you'd see the TOTP field as well as any other data you may need, like security questions/answers, which also means you'd be able to do a large type from there.

  • noktulo
    noktulo
    Community Member

    I agree, I've been doing my best to enable TOTP anywhere it's available, and having it accessible through the extension would be super helpful. (Having it auto-copy into the pasteboard after login autofill would be amazing :love: )

  • SergeyTheAgile
    edited August 2016

    Please update to 6.0.185 and you can try TOTP copy feature (note that it's turned off by default, visit settings\options\browser to turn on :)

    UPDATE: 6.0.185 is pulled out due to some missing/mismatch DLL. We are investigating and fix is coming soon.

  • dszp
    dszp
    Community Member

    @brenty thanks, I haven't tried the Beta since just before and after it's initial public release and it has much improved! I kept it from touching my Dropbox data this time so I can't report on that speed (which back when I tried it was more similar to my 1P 4 performance issue already mentioned), and I used PIF export from 4 with import to 6 (almost missed that "attachments" folder with some documents to manually upload though!). This is the first time I moved all my data over to 1Password Families, and performance, including searching, on my 1100-odd items is excellent, no lags or limits as far as speed goes!

    @SergeyTheAgile Thank you so much for the new feature, I look forward to testing 6.0.185 or it's children when it's re-released soon! First thing I do with a new version is review the options :-)

    @MikeT I do see that the new update is only a few days old, obviously I'm going to keep wanting more but I do think I might be able to switch over to using 6 now, especially with the TOTP copy feature about to hit. As I mentioned to brenty performance is great, though as I also mentioned, comparing Families sync'd data to Dropbox data (previously) isn't fair. But fair comparisons are not a useful as really fast, which it is :-) I've also switched my iPhone over to the Families data and set up my son on the Beta 6 on his laptop and imported his data, so unless there's a major roadblock I'm probably on 6/Families for the foreseeable future. I can easily enough create new logins manually for now.

    Regarding UI feedback about copying the TOTP code, that would probably be a good idea long term (and maybe there are better alternate options for non-power-users, or even power users, especially if there's a TOTP field standard as has been discussed/wished for or some more reliable way to auto-fill it--daily I use two different sites where one has the code field on a second page and the other has it on the same page as user/pass though, so probably not happening soon!). However, I suspect that beta users who also use TOTP heavily are probably in a category that can live without feedback as long as it's an option they've turned on (I agree with it being off by default; wouldn't be nice to clobber users' clipboards without their intent). And being able to fill with a keyboard shortcut and then paste the code with a keyboard shortcut both should make it quite handy. Plus, the code is good for 30-ish seconds or less, so it's not terribly sensitive info to copy to the clipboard.

    If I had one more request it would be a tie between more flexibility/details/options on Mini and letting me sort the Favorites in the correct (aka, "my") order in the main window like I have in all other apps (sorting options include by category and alphabetically, so the sort is a thing, just not the Favorites manual sort :-) and I'm going to have to tip the scales to the latter since as you mentioned Mini is so new and more is coming soon :-)

    Oh, I would like to have an Exit and "Open 1Password full window" option in the right-click menu for the tray icon, while left-click should open Mini like both clicks do now. But that's really my final feedback for the moment...I'll wait for the next release!

  • AGAlumB
    AGAlumB
    1Password Alumni

    Great suggestions! I don't think we can add all of that in the next update like the TOTP copy, but we'll continue to refine the UI. Keep it up with the feedback! :chuffed:

  • dszp
    dszp
    Community Member

    @brenty Sure, once the TOTP stuff is in the next update it looks like it's at the MVP (Minimum Viable Product) level at least as far as my needs are on a daily basis. As @MikeT said, imagine what's coming in the next 6 months based on how far it's come in the last 2-3 months :-)

    I did want to note in case you don't have it logged somewhere, that when I click the extension or Ctrl+\ with Chrome focused and Beta 6 is locked, it does pop up Mini and let me type my password but then it unlocks and shows me the generic Mini not the site-specific one. I can then re-click the extension button and it loads the fill-this-page Mini properly, once it's already unlocked. Not a major issue at all but a small logic thing I noticed.

  • XIII
    XIII
    Community Member

    Will you implement this copy feature for the Mac as well?

  • mohamedosman
    mohamedosman
    1Password Alumni

    We only build the Windows app in around here @XIII ;). But the Mac team doesn't have any plans to implement this copy feature at the moment, but you could make a separate thread here and request to add the feature.

  • @dszp yep, mini unlocks without context today, but it's on my list to fix. Thank you for the reminder!

    @XIII we will whisper into Mac team ears, they are cool guys, but I can't make any promises now ;)

  • dszp
    dszp
    Community Member

    @SergeyTheAgile Thanks, looking forward to it! It's not hard to re-click the extension button but it's bitten me a couple of times today (the unlock time maxing at 1 hour, and locking sooner than that--I've been active on the computer all day but it's timed out twice--is a bit limiting but work-aroundable) but of course it'll be nice when all the little niceties are done...

  • cwanja
    cwanja
    Community Member
    edited August 2016

    If I understand the auto-lock timing preference correctly @dszp, that is relative to just the last time you clicked / did something in the application. I, like you, have it set for an hour. And if I do not use it over lunch (for example) I come back to it being locked.

    Not sure of your workflow, but you might consider locking when switching sessions and telling the application to lock on idle - never.

  • @dszp @cwanja current lock mechanics tracks inputs over 1Password app window only, we plan to add 1Password mini tracking soon too. We also look forward to do system wide input tracking (so you don't need to touch 1Password to keep it unlocked), but we'd like to approach that feature carefully (it's literally a global key logger that does not log).

  • dszp
    dszp
    Community Member

    @SergeyTheAgile Good to know, that seems to line up with my experience. Adding Mini tracking will help. Maybe increasing the timeouts to a few hours instead of just an hour would help, I don't like to leave it unlimited but I don't want it to lock continuously throughout the day (my Diceware password isn't short :-) Does "Lock when switching session" lock when the Windows session is locked, basically?

  • @dszp yes, "Lock when switching session" will lock 1Password when it receives a message from the system that you locked your computers, switched to another user, disconnected from your session or session remote control status is changed. This is my personal preference to lock - hit Windows+L, both 1Password and my user session are locked.

  • MikeT
    edited August 2016

    Hi guys,

    We've just shipped 186d update with the TOTP feature, which is disabled by default and you can turn it on in via Settings > Options > Browser.

    Let us know how it turns out for you.

  • dszp
    dszp
    Community Member

    It's so wonderful!

    Thanks @SergeyTheAgile, that's a little more locking than I'd like (I like to lock my workstation when I stand up from my desk but don't mind if 1Password is unlocked for an hour or two still), but so far it's not intolerable. A locked workstation with BitLocker enabled is going to take some banging before someone can get in and get to my 1Password stuff, likely enough time to time out and it locks anyway if rebooted. Which is why a 2-3 hour timeout and no session-based locking would be ideal, or a 1-hour timeout that was system-wide (I understand the limitations you mentioned) rather than local to 1Password would be OK as well. For me anyway :-) I'd be OK with it relying on mouse activity vs. keyboard activity for its idle timer if that's easier and less intrusive to track system-wide.

  • Hi @dszp,

    I'm glad to hear that.

    The auto-lock timer will be adjusted over time, we just have to be very cautious about making any changes related to this. We start with the most strict rules first and then we'll add more flexible rules over time. We have a lot of things we need to improve first before we can get to this specific area.

    I think we probably won't do the keyboard vs. mouse inactivity, we've tried this in 1Password 4 and it caused system instabilities, so we rather focus on making it more flexible in the app/mini first and see if we can get it almost perfect without relying on global system hooks.

  • dszp
    dszp
    Community Member

    @MikeT Thanks, that helps me understand where you're coming from. I'm fine with making changes slowly to ensure security, that's why I use 1Password :-) If the idle timeout includes the Mini and if I can eventually set a longer timeout (say, 2-4 hours, or maybe longer), I'll probably be fine with the existing options. The lack of instability will be a bonus :-)

  • Hi @dszp,

    You're welcome. The timer should be flexible to go up to several hours. I'm hoping that we can add the input box next to minutes, so you could just add 120 minutes to make it two hours or more if you want.

  • AGAlumB
    AGAlumB
    1Password Alumni

    @dszp: Also keep in mind that while you're conscientious about the general security of your computer, not everyone is. And more importantly, we don't want to take system security for granted when designing 1Password and just assume that everyone has theirs as locked down as you do. I think it's important to plan for the worst case scenario as much as possible. Cheers! :)

This discussion has been closed.