Mini Save dialog showing up on missing monitor

dszp
dszp
Community Member
edited April 2023 in 1Password 7 for Windows

I normally have three monitors attached to my computer when docked (Surface Pro 3 with two externals). This was working previously, but I've noticed that the past few days when I log in to a site it opens the prompt to save or not save the login (from Chrome) on a monitor that's not connected. So I'll use my Surface standalone, log into some sites, then dock it. I'll have 3-4 "want to save login?" messages waiting on one of the non-built-in monitors waiting for me to cancel.

On a related note I've been prompted a lot to save passwords on sites that are in the preferences as excluded domain names. This is a bit annoying but not the end of the world :-)


1Password Version: 6.4.296d
Extension Version: 4.6.2.3
OS Version: Windows 10 Pro x64
Sync Type: Families

Comments

  • AGAlumB
    AGAlumB
    1Password Alumni

    @dszp: I think I see the problem: you're using a pre-alpha version of 1Password from the future — woooooOOOOooooo!

    All nerd-joking about version numbers aside, I'm guessing that's a typo and you're using the current stable release (6.1.296). And I'll be honest, while you're right that that's not exactly a showstopper, that sounds pretty annoying! A few questions:

    1. When you dock your Surface, is it still the primary display?
    2. Are you getting these autosave prompts on one screen in particular?
    3. Are the autosave prompts for loans already saved in 1Password?
    4. Are the excluded domains that you're getting autosave prompts for involving logins already saved in 1Password?

    I wonder if these issue are related in your case. Let me know what you find!

  • dszp
    dszp
    Community Member

    @brenty haha, that 4 key is awfully close to the 1 key on the darned keypad, though I wish I was running a future alpha ;-) I am running the latest beta (ends in "d" right?), but that appears to match stable for the moment, and your version number is correct.

    When I dock my Surface my Dell external 2K display is the primary, NOT my Surface. A month ago it was my Surface but I found I prefer a different primary display when docked.

    I'm getting them primarily on my non-primary external, non-Surface display (my secondary external that's a standard res screen. Visually the primary 2K monitor is at the top left, the secondary is directly to its right (where the password save prompt is showing), and then the Surface internal display on the dock is below and more under the right-hand monitor.

    The autosave prompts have lately been for logins already saved in 1Password. Haven't tested my loans, don't have many of those though I do save those passwords in 1P ;-) But My logins for autotask.net and a subdomain of n-able.com, for example, have been popping up a "save" dialog, sometimes after logging in and often after saving another form on the site with a password field (like editing a saved password). These domains are excluded manually, to your last question--though I believe I've been getting save prompts at a wide variety of sites, included in 1P already and explicitly excluded in 1P. I'd have to track this closer.

    It would be nice if my excluded domains list followed me--I'm messing with Server 2016 at the moment and just installed 1P6 on a fresh Server 2016 install and there's no excluded domain list. It only has 4-6 items on my main system, however.

    And I do wish for slightly better matching--I have to click to select "which" site to log into different subdomains saved in separate entries (each site presents both)--some sites this would be OK but some I want to match only an exact list of subdomains (just the ones in URLs of the entry) so Ctrl+\ autofills with no additional steps. But this is yet another, even more minor, request, not related to my above issue :-)

    Clear as mud, or did I miss something above? I'll be at my desk most of the day tomorrow 8-5 Eastern with the dock setup I mentioned, though as I said I'm not using it at this exact moment (and in fact I'll be asleep shortly, or I won't be at my desk by 8...).

  • AGAlumB
    AGAlumB
    1Password Alumni
    edited November 2016

    haha, that 4 key is awfully close to the 1 key on the darned keypad, though I wish I was running a future alpha ;-)

    @dszp: Believe me, you don't. :lol:

    I am running the latest beta (ends in "d" right?), but that appears to match stable for the moment, and your version number is correct.

    Just in case you weren't already aware, with the stable release, the beta channel has changed slightly. So if you were running the beta previously, you may just be on the stable channel now. Go to 1Password Settings > Options > Updates and enable betas and follow the steps there if you haven't already. But yeah, currently 296 is the only release. Just wanted to make sure you don't end up waiting for a beta that never comes. :)

    When I dock my Surface my Dell external 2K display is the primary, NOT my Surface. A month ago it was my Surface but I found I prefer a different primary display when docked.
    I'm getting them primarily on my non-primary external, non-Surface display (my secondary external that's a standard res screen. Visually the primary 2K monitor is at the top left, the secondary is directly to its right (where the password save prompt is showing), and then the Surface internal display on the dock is below and more under the right-hand monitor.

    Got it! Thanks for those details! While I'm not able to exactly reproduce what you're experiencing (I am not fortunately to have more monitors), I think I have an idea of what's going on here...

    The autosave prompts have lately been for logins already saved in 1Password. Haven't tested my loans, don't have many of those though I do save those passwords in 1P ;-) But My logins for autotask.net and a subdomain of n-able.com, for example, have been popping up a "save" dialog, sometimes after logging in and often after saving another form on the site with a password field (like editing a saved password). These domains are excluded manually, to your last question--though I believe I've been getting save prompts at a wide variety of sites, included in 1P already and explicitly excluded in 1P. I'd have to track this closer.

    Can you give me a sample of your exclusion list? Are they comma or CR separated? I wasn't able to get any excluded domains to autosave.

    It would be nice if my excluded domains list followed me--I'm messing with Server 2016 at the moment and just installed 1P6 on a fresh Server 2016 install and there's no excluded domain list. It only has 4-6 items on my main system, however.

    Yes! That's a cool idea. I'd never thought of that before, but it may be that autosave exclusions and some other settings may be useful as "account-level" preferences. Such a thing doesn't exist now, but I can see how it would help "pick up where you left off" when switching to another device — or just setting up a new one.

    And I do wish for slightly better matching--I have to click to select "which" site to log into different subdomains saved in separate entries (each site presents both)--some sites this would be OK but some I want to match only an exact list of subdomains (just the ones in URLs of the entry) so Ctrl+\ autofills with no additional steps. But this is yet another, even more minor, request, not related to my above issue :-)

    You're absolutely right. Part of this is logic, but the other is UI, presenting the matching in a more useful way.

    Clear as mud, or did I miss something above? I'll be at my desk most of the day tomorrow 8-5 Eastern with the dock setup I mentioned, though as I said I'm not using it at this exact moment (and in fact I'll be asleep shortly, or I won't be at my desk by 8...).

    Here's my theory: 1Password 6 now saves window positions. Initially I was seeing all autosave prompts show up on my primary (external) monitor. This was a bit confusing and annoying when I had Firefox on the secondary (internal) display. But I was able to get them to show up there by closing the window after moving it. Admittedly, this is not ideal since you may not want to close an autosave prompt in most cases (unless you're being prompted needlessly...) So we'll see if there's a better way of handling this.

    Also in that vein, if the window position was saved on another display, its coordinates may be off the edge of the one currently connected. We'll see if there's a way to detect the display and current browser window to compensate. Let me know what you think!

    ref: OPW6-657

    ref: ALX-63135-629

  • dszp
    dszp
    Community Member

    @brenty Yeah probably for the best I don't use anything alpha any longer, though I used one of the early ones :-) I appreciate the update about the beta; I'm definitely signed up for them and upgraded to today's beta release already!

    To add on to the window placement thing, when I opened 1Password to unlock tonight with only my Surface's screen, it was only showing part of the window, like it was trying to display on my main-when-docked 2K monitor still rather than adjusting since I'm on my internal screen as primary. It's rare to see a semi-mature application that gets window positioning right, it appears to be quite difficult to catch all the edge cases :-)

    My exclusion list is CR separated and I emailed it to you, BitBot number [#ALX-63135-629]. Nothing really private there (those they're not terribly useful without credentials), just rather practice good operational security and not list many of the services we use at work in one place. They don't always prompt to save. I don't know if it's ever happened when I've filled in the login from 1P, but I think it did once or twice. Usually it's on a subpage after login that has a username/email/computer name and a password field of some sort, but is on the same subdomain and it's prompted me to save. However, I also don't always know if it prompted me if the save window shows up off screen either, at least not until tomorrow...seems to be happening less or inconsistently anyway, just enough to notice over a few days. Haven't figured out the trigger.

    I would love some account-level preferences, at least per platform. I tend to use the apps the same on multiple systems. I don't really want the timeout to lock to sync (would rather set that per system for security) but things like exclusion list or other workflow items not specific to security would be nice to sync, at least optionally. Security items should stay at their ideal secure defaults for a new installation though.

    The window positioning stuff is annoying because the defaults of not remembering anything were usually OK because it would never get lost anywhere, but then when you do save something and my screen layout changes, it remembers my preferences but then it can't use them when I've changed the layout. Six of one half-dozen of the other! Windows itself had (and to some extent still has) this issue with desktop icons! There are endless third-party utilities to try and help out with Windows. I wonder if, instead of remembering one location, somehow saving the configuration of attached screens and their resolution (3 monitors, x, y, and z resolutions) for example, and then saving the location information for 1Password windows separately for each unique combination, would end up resolving the issue. If the combination doesn't exist in preferences, defaults are used unless changed by the user, then they're saved for just that specific combination when changed. But of course, that does add complexity and the possibility of bugs in that, now more complex code, so I know you have to balance that time and effort with other features :-) Not sure it's going to be consistently right without something like that though. At home I have another dock with two external monitors (don't use them often right now), but they're two identical resolutions, different from any at the office, and sometimes I only use one if I'm watching something else on the other! So that's four possible combinations (standalone, two externals at work, two externals at home, and one external at home) of displays to deal with inside of a day or two! Windows actually manages to sort this out pretty well in 10, but not very well before. Except my (very few, partly due to this) desktop icons tend to move themselves around a bit...

  • Hi @dszp,

    Thanks for writing back.

    The windowing issues are known edge cases and we're going to rebuild it to include the disconnected monitors and various resolutions factors. We didn't test this enough to see how disconnecting/reconnecting monitors would be affected.

    For now, you have updated to our latest internal beta that has the option to reset the stored values by letting you hold the control key while opening the app. Let me know if this works for the moment.

    As for the exclusion list, subdomains aren't supported yet, so you have to use the domains only, like example.com instead of www.example.com. I noticed 3/4 of your list has subdomains in it, so that may be the reason you're still seeing it.

    In addition, if you have an existing Login that has an insecured http:// URL saved, 1Password would prompt to auto-save even if you have an existing one, especially if the site redirects to a secure page.

    Both issues will be addressed but I don't have a timeframe on this.

    Also, subdomain ranking for Login items in 1Password mini is coming as well, it's not implemented at the moment.

    I would love some account-level preferences, at least per platform. I tend to use the apps the same on multiple systems. I don't really want the timeout to lock to sync (would rather set that per system for security) but things like exclusion list or other workflow items not specific to security would be nice to sync, at least optionally.

    For the moment, you can store them in a Secure Note item and copy/paste between various 1Password apps. We'll bring this up with the team to make it a part of the sync process.

    Personally, I'm not sure this is a good idea, I haven't seen a good system of syncing prefs that didn't annoy me or break easily.

    ref: ALX-63135-629

  • dszp
    dszp
    Community Member

    @MikeT thanks for the clarification. Didn't know subdomains weren't included in exemptions, I wondered but am not sure if that's the cause of the additional prompts. Will keep an eye out.

    I do think at the moment the exemption list is the only pref with user-provided data. And you do kind of have a piece of software that literally has half of its entire purpose under the hood being storing syncing data reliably ;-D (exclusion list stored in special program-readable secure note maybe?). The only other pref I care about syncing is the copy TOTP code on fill, but that's because other than lock timeout it's the only one I adjust so that's not really fair :-) Good idea about using secure note for exclusion list, I'll do that for now! And regardless of sync engine I'm fine with pref sync not being at the top of your list for a while.

  • Hi @dszp,

    It is possible I may be misunderstanding what you're asking.

    It's not the data consistency I'm worried about, it's the behavioral changes that can occur when you have two separate OSes with many variables; the setting impacts how the app works, it's not just solely data and so when you sync these settings across computers in your entire ecosystem, you may not get consistent experiences. For sure, we wouldn't sync any settings that may do that but it's not the same as solely syncing data.

    For an example, I've enabled a language in one of my Windows PC, which is sync'ed as a Windows setting for all my Microsoft account-connected PCs and it didn't exactly result into a nice experience because I've accidentally set a language I don't know as the default display language, which I didn't realize until I sign out and sign back in. :+1: However, this experience among others makes me biased on this subject.

    Account-level preference sync is on the list and the team will review it.

  • dszp
    dszp
    Community Member

    That's fair. Syncing the contents of the exclusions list wouldn't likely cause any issues (and is literally just data) but others definitely might. Fine to contemplate it as a single solution. Like I said I'm not in a hurry for it or anything :-)

  • MikeT
    edited November 2016

    :+1:

    It shouldn't but it's not just data, you have to add extra handling to make this optional as people have different setups at home and work and that means 2x complexity to maintain it.

    Plus what about different 1Password accounts in the same app that have their own exclusion lists, do we merge them all?

This discussion has been closed.