Signing back into the Community for the first time? You'll need to reset your password to access your account. Find out more.
Forum Discussion
Former Member
3 years ago1Password asking for permission each time
When using 1Password for storing my SSH keys, it asks for authentication (here: fingerprint) each time a key is accessed. This is different from handling passwords for e. g. web forms: As long as 1Password isn't locked, I can fill the password fields.
As I very often access different machines, this annoys me already after one day ...
Is it possible to disable that behaviour?
1Password Version: 8.7.0 (80700012)
Extension Version: Not Provided
OS Version: 12.2.1 (21D62)
- Former Member
I recently discovered what means leaving computer on for several days, and meanwhile background apps trying to refresh some stuff using SSH auth... I had to kill 1password to stop al those dialogs... 😅
- Former Member
Hey folks 👋 We've been paying attention to all of this feedback about being prompted too often and are working to improve this experience for you. We'll have more to share soon so stay tuned to the forum. If you're not yet a part of our Developer Tools Slack Workspace I would encourage you to join here as well to get the latest updates!
- scottawNew Contributor
I don’t think they can just leave it so you never have to authenticate again. That’s the whole reason ssh-agent isn’t as secure (I think - correct me if I’m wrong). I understand the technical specification that once 1Password locks, you’re going to have to authorize the use of the ssh keys again. I don’t think that’s out of line. I wish it would let me use my watch for that on my late 2015 iMac, but I can hold out until I can afford to replace it. For now, this works fine and I like having those keys in 1Password.
- Former Member
I would also like something like this, where 1Password allows all applications to access the SSH keys without a prompt.
I already ended up disabling the auto-lock after inactivity behavior (see https://1password.community/discussion/128043/request-option-to-allow-ssh-access-when-1password-is-locked/p1?new=1), and still have to click through prompts various times per session
- barneydesmondNew Contributor
I believe I'm seeing the same problem, but I haven't characterised it completely to know for sure yet. I use a single SSH key on my Linux workstation and use it to login to many different servers for work, and at home (I'm a sysadmin). It seems like I get asked to authenticate to 1Password for every different host I connect to, at least the first time within a desktop session or within a period of time.
For me this is entirely unworkable and I had to disable it after 5 minutes. I don't have a fingerprint scanner or anything, so this means entering my somewhat-lengthy password for every SSH connection. It's quite common to login to a few different servers in quick succession, such as when using ansible to configure servers. It definitely needs to be a single 1Password unlock per desktop session.
- Former Member
Actually after some investigation, subsequent commands within the same process do in fact not prompt for a passphrase.
Some IDEs though cause trouble here.Running
git fetch
in an intellij IDE ends up requesting for a passphrase each time. - Former Member
I have observed this behavior as well. In fact, it's in direct contradiction to the documentation. This seems like a bug.
https://developer.1password.com/docs/ssh/agent/security#authorization-model
- scottawNew Contributor
Same issue here. Really love how much easier it is to setup than fighting ssh-agent, but considering I sometimes remote into my Mac from my iPad Pro to do development on my local projects, doing a git push is going to suck if I have to fire up Screens to click the 1Password permission button every time.