In 1Password app, I am trying to enable MFA for a site I select the "Scan QR Code" button and I get this message Note that I have allowed screen recording permissions 1Password Version: 1Password for Mac 8.9.8 (80908009) Extension Version: 2.4.1 OS Version: macOS Monterey 12.6.1 Browser:_ Safari

I am very interested to know if this feature is functional under any circumstance. I haven't found a way to make it work as expected. My suspicion is that the mechanism expects the QR code to be an image within a web browser that has the 1Password extension enabled. If that's the case, I don't understand why permission for screen recording is required. I guess I could spend a few more hours troubleshooting this defect.

I received a response from 1Password Support via email after I sent the diagnostics information, which is weird, because I suspect most 1Password.Community members don't have access to my email. It offered a tip about adjusting my screen brightness, which suggests that I need to provide more context. For background, I have been using OTP Auth for several years. It is good, but limited. I have, until recently, resisted adding TOTP secrets to 1Password because it violated my conception of separate factors. I have since given up this position, since my emergency recovery codes are already in 1Password, so the TOTP authorizer app isn't necessary when performing an attack. If somebody gets into my 1Password vault, the game is over. To enjoy the significant benefits that come from having TOTP in 1Password, I want to transfer all 72 secrets. I have tried multiple exfiltration methods. One method is to copy the secret in Base32 out of OTP Auth for Mac. Unfortunately, the Catalyst app is buggy as hell and the context menu fails to activate and present the copy option. This is not 1Password's fault, but it does mean that I can't use the least error-prone method. The other method for extracting secrets is to have OTP Auth for Mac show the QR code as an image. I assumed that 1Password for Mac would be able to tap into the displayed pixels and grab the currently visible image inside OTP Auth for Mac. These are the things I have tried: * Display QR code in OTP Auth Catalyst app, then click the "Scan QR code from clipboard or screen" button in 1Password. Result: "QR code detection failed" * Thinking that perhaps the issue was with an OS secure overlay feature, I grabbed the QR code image content and saved it as a file to display in Preview. Also fail. * I attempted to copy the image data into the clipboard from Preview. I inspected the clipboard with Keyboard Maestro to verify the content existed. Still, no import to 1Password. * I opened the saved QR code image in Google® Chrome® with the 1Password extension activated, thinking that perhaps the expected customer use case is to import an image from some web page leveraging the extension's ability to inspect the DOM and media. Nope. * I opened the target website and injected an image tag into the page to load my saved QR code, thinking that perhaps 1Password would perform a document.location.origin match on the record being edited in 1Password, because, let's be honest, that's the sort of over-engineering I would subject my customers to. Still nope. The application log is splattered with lines like this: WARN 2023-02-03T08:08:45.492 op_executor:invocation_loop(ThreadId(17)) [1P:op-app/src/app/backend.rs:220] operation blocking event loop invoke Invocation(External(ProcessQrCode(<QrCodeProcessRequest>))) took more than 50 ms (70 ms) I'm running macOS 13.1 22C65 on a Mac Studio. The 1Password for Mac 8.9.15 (80915001) application has been granted Privacy & Security permission for the following: * Location Services * Camera * Accessibility * Screen Recording I will note that running 1Password on iOS and aiming my phone's camera at my ridiculous Apple Studio Display to import what OTP Auth for Mac is showing works flawlessly. It's just not the procedure I was hoping to use. I'm on the production release channel. I am willing to switch to beta, but haven't yet.

1P_Dave I came to the forums to resolve this product issue so that others may benefit. I'm not super interested in having secret email correspondence. The diagnostics output was not necessary in order to tell me whether this product feature is claimed to function currently or not.

@timheilman Thank you for sending in the diagnostics report. I can confirm that the team has received it and that you'll receive another reply via email as soon as possible. Is there a bug status page where I can track the status of this bug? I provided a report as described, but no response. When, and if, the issue is resolved you'll see the bug fix noted in our release notes: 1Password Releases For the time being the best workaround, if you're unable to use the desktop app to scan the QR code on a particular website, is to use the browser extension instead: Use 1Password as an authenticator for sites with two-factor authentication -Dave ref: LDX-94585-796

@Olliecampbell I'm sorry that you ran into the issue as well, thanks for confirming that the workaround also helps on a Windows PC. I've added your report regarding the Sony website to our internal work item for the issue. -Dave ref: dev/core/core#19783

"QR code Detection Failed" message attempting to scan QR

1P_Dave
Moderator
2 months ago
jestech

I'm sorry for the impact to your workflow and I've shared your report with our development team. I'm glad that the mobile app provides a workaround for now.

-Dave

ref: dev/core/core#19783
1P_Dave
Moderator
2 months ago
edweb

Thanks for the reply. When a QR code is open in the browser on your Mac, you should be able to click on Scan QR Code from the 1Password pop-up. Please see the following screenshot:

Can you post a screenshot of what you see in this location in the 1Password pop-up on your Mac when a QR code is open in the browser?

-Dave
jestech
New Contributor
2 months ago
I have the same problem; it has been around for quite a while. I work around it by scanning the QR code with the app on my phone.
edweb
New Contributor
3 months ago
Thanks, Dave
This happens to ALL websites that offer 2FA....too many to list!
Also, the "Scan QR code" option does NOT show when trying to use the 1PW extension for QR code scan, hence my question......
1P_Dave
Moderator
3 months ago
edweb

I'm sorry that you're running into issues with QR code scanning using the 1Password for Mac app. Are you able to share the address of the website where you're running into the issue?

Also, I do not understand the tutorials on how to use the browser extension to generate a QR code to register 2FA - when I want to add 2FA to an item from within the browser extension, the "Edit" button for said item is not functional / responsive. I use Safari and Chrome-based browsers (Firefox, Vivaldi), all same result.

1Password does not generate the QR code, instead the website that you're trying to setup two-factor authentication generates the QR code for an authenticator app like 1Password to scan. Try the following:

Open your browser.

Navigate to the setup two-factor authentication page for the website that you wish to turn two-factor authentication on for. Have the website display the QR code.

Click on the 1Password icon in your browser's toolbar.

Click on the correct Login item, then click on the three dots icon in the top right corner of the item and click Scan QR code.

Let me know if that doesn't work.

-Dave
edweb
New Contributor
3 months ago
Mac OS 15.1.1
1PW 8.10.54

This is to confirm that as of today 10 December 2024, QR code detection STILL FAILS in my desktop app.

Also, I do not understand the tutorials on how to use the browser extension to generate a QR code to register 2FA - when I want to add 2FA to an item from within the browser extension, the "Edit" button for said item is not functional / responsive. I use Safari and Chrome-based browsers (Firefox, Vivaldi), all same result.

Thank you.
1P_Dave
Moderator
8 months ago
oschrenk

I'm sorry for the inconvenience, I've let our development team know. I'm happy that using 1Password in the browser provided you with a workaround for now.

-Dave

ref: dev/core/core#19783
oschrenk
Occasional Contributor
8 months ago
What helped was using the QR Code scanner from within the browser and not trigger the QR code scanner from the app.
1P_Tommy
Moderator
8 months ago
oschrenk

Does this also help you?
1P_Tommy
Moderator
8 months ago
Kindsaber

Take the manual code you receive and past it into the TOTP field of 1Password. It would look to be the key from your screenshot.