Autofill vulnerability
This discussion was created from comments split from: Chrome autofill not working.
Forum Discussion
Hey @vadimm ,
I split your comment from the discussion you commented in because it was unrelated to the issue they were discussing there.
To answer your question, 1Password keeps you protected and addresses these autofill risks as follows:
- 1Password will never autofill anything without your specific command. You must tell 1Password to autofill every time.
- 1Password will only autofill usernames and passwords if the URL you are currently visiting is identical to the URL that is saved in 1Password, preventing phishing attacks.
- If you need to autofill personal information such as email or address, 1Password will suggest autofilling only these specific fields from your identity item and will not reveal any other bit of info from that identity item. However, if you want to autofill all of the fields on the page in one go, you can click on 1Password's icon in your browser, select your identity item and click on "Autofill". That will fill all field on the page with your personal data (and reveal it to the page/website).
- And last but not least, 1Password won't even suggest autofilling when it is locked, which helps preventing "reflex-like" behavior of autofilling wherever whenever. Keep your 1Password locked when you don't use it :)
