Inconsistent password generator user experience

Jeff Kingston

I am finding the password generator a bit frustrating when using the words option.
1. The capitalization option only appears in the Chrome extension. Why are these not in either the Safari extension OR the 1Password product itself?
2. The words options are even more limited if you edit via the webpage.
3. Every site I have been updating my password for has required symbols AND numbers. Would it be possible to allow for this?

Overall this is a very inconsistent and frustrating user experience. Is there a plan to get these all aligned?

Chrome Options

Safari Options

Mac App Options

Web Options

---

1Password Version: 7.0.4
Extension Version: 4.7.1
OS Version: OS X 10.13.5
Sync Type: Not Provided

dteare

Hi Jeff,

You're right, it would be great to get all these password generators aligned with a similar design. It's something we have planned and are working our ways in that direction.

Regarding websites that require a number and a symbol, as you found there is no way to do that by default with the word list generator. For sites where you don't need to memorize the password or speak it, I suggest using the random password instead. It's ideal for most situations.

++dave;

Jeff Kingston

The issue I have with the random generator is so many site have rules about WHICH symbols can be used. Most of the time the random generator uses something that isn't allowed.

ag_kevin

Hi Jeff,

It'd be great if there was a standard for password rules that sites could implement, but there is not right now, so it makes the task a little more difficult. It is certainly something we can look into though.

Cheers,
Kevin

jdpsy

Would it be possible to inculde an option to the password generator to copy and paste the allowed symbols from the website I want to create a password for?
For example an extra line in the password generator in which I can put the allowed symbols.

JadC

@jdpsy that is an interesting suggestion, but what I find is that a lot of websites don't list allowed symbols anymore. I have found that a lot of websites state something along the lines of "8-20 letters, 1 symbol, 2 numbers". That would be a bit hard to list out all the allowed characters unless you have something like a regular expression.

I think Apple is onto something with iOS 12, macOS 10.14, and Safari 12. They have an attribute for <input type="password"> fields where you can specify "password rules" like this: <input type="password" passwordrules="required: lower; required: upper; required: digit; required: [-]; minlength: 20;">. The 1Password X team is already looking into supporting it, so let's hope it takes off :smile:. Here is the dev page if you are interested: https://developer.apple.com/password-rules/.

jdpsy

@JadC Thanks for your answer.
Maybe German websites (I live in Germany) are a bit different, because most of the time I see a list allowed symbols for the passwords.

But attribute for "password rules" sounds interesting and would be the easiest thing for the user, if most of the websites will implement this attribute.

JadC

@jdpsy that is an interesting observation and thanks for the suggestion. Hopefully the standard does take off as it would make everyone's lives easier :smile:.

Jeff Kingston

I was sad to see 1 Password X for Chrome too the worst of the options for words based password generation. It has no options so I have to edit every password manually. It defaults to SPACES as the delimiter. I have yet to come across a site that allows spaces in a password. Has anyone else?

ag_ana

@Jeff Kingston: off the top of my head, I do not remember finding a website that did not allow a space character in the password. I suppose that there could be some that do not allow it as a symbol, but in my experience they are luckily not the majority.

Thank you also for taking the time to share your feedback about the password generator! In 1Password X, the password generator is configured to work with the majority of websites without having to tweak anything, but unfortunately not every website is build the same, so some of them will require some tuning. We are looking at ways to improve the overall password generation experience in general though, so thank you again for sharing your thoughts :)

Ryan Parman

Here's the PR for adding to the HTML spec. https://github.com/whatwg/html/issues/3518

It would be great if 1Password (working alongside other password-generator vendors: Chromium, WebKit, LastPass, Dashlane) committed to adding support.

Ben

I share the concerns expressed by the Chrome team, here: https://github.com/whatwg/html/issues/3518#issuecomment-419470439
But it is great that the time was taken to put this together. I'll mention it to our team. :+1:

Ben