Autofill is now available on iPhone with iOS 12. If I use this, are my passwords still encrypted?

Angeroo
Angeroo
Community Member
in iOS

I want to be sure that if I use auto fill that my passwords are still encrypted. If I am in a public place and use Face ID and autofill, is my data at risk?

1Password Version: 7.2.1
Extension Version: Not Provided
OS Version: iOS 12.0.1
Sync Type: Dropbox/ iCloud
Referrer: forum-search:Auto refill

Comments

  • Ben
    Ben

    Hi @Angeroo

    Your passwords are still encrypted, yes. :)

    Ben

  • Angeroo
    Angeroo
    Community Member

    Thank you, Ben. So if I am in a public place and need to access a password, can I assume my passwords are secure since they are encrypted?
    When I am in public and need to access 1Password, I usually turn off wifi and use face ID to access the password.

    Here are 2 situations I am thinking of:
    1. When getting and paying for a new phone, it is often necessary to access password info. I turn off wifi and use face ID to access the password. Often I can simply copy and paste the info. Is this secure?
    2. However, sometimes I need to reveal the password so I can enter it somewhere other than my phone. As long as I cover the revealed password, is it still encrypted on my device?
    Thank you,
    Deb

  • AGAlumB
    AGAlumB
    1Password Alumni

    Thank you, Ben. So if I am in a public place and need to access a password, can I assume my passwords are secure since they are encrypted?

    @Angeroo: Correct. In order for someone to find out anything stored in 1Password, you'd need to either let them see the info or give them your Master Password so they can access it themselves.

    When I am in public and need to access 1Password, I usually turn off wifi and use face ID to access the password.

    There's no need to turn off Wi-Fi to use 1Password. However, you should be careful of what you send over the internet, if the connection is not secure and/or you're using an untrusted network. Those things are outside of the scope of 1Password though.

    Here are 2 situations I am thinking of:
    1. When getting and paying for a new phone, it is often necessary to access password info. I turn off wifi and use face ID to access the password. Often I can simply copy and paste the info. Is this secure?

    It depends on where you're pasting it. Can you give a specific example?

    1. However, sometimes I need to reveal the password so I can enter it somewhere other than my phone. As long as I cover the revealed password, is it still encrypted on my device?

    It's not encrypted when you view it, but everything in 1Password is encrypted until you unlock it with your Master Password (or Face ID). And then it's secure when 1Password is locked again.

  • Angeroo
    Angeroo
    Community Member

    Is this correct?
    If I am in a store and I need to enter passwords into a new phone to sign back into a cloud, for example, I am encrypted if I simply copy and paste.

    However, if I need to enter credit card info to apply for a loan, and I view information so I can then enter it manually, I am relying on the merchant’s site to be secure.
    Thank you.

  • AGAlumB
    AGAlumB
    1Password Alumni

    Is this correct?
    If I am in a store and I need to enter passwords into a new phone to sign back into a cloud, for example, I am encrypted if I simply copy and paste.

    @Angeroo: That's not quite right. Once you paste it into an app/website/etc., you have to rely on that entity protecting and not misusing that information.

    However, if I need to enter credit card info to apply for a loan, and I view information so I can then enter it manually, I am relying on the merchant’s site to be secure.
    Thank you.

    That's correct. Essentially, when you share a secret with anyone, you're trusting them with it.

This discussion has been closed.