Hacker News Reader

Comment by apozem | Hacker News Reader

1Password in Firefox unlocking the desktop app caught my eye. I'm on Mac and have to unlock 1Password in Firefox completely separately from the desktop Mac app.

View on HN

We're bringing this feature to Mac and Windows as well. It's currently in beta and will be coming to the official release soon.

If you'd like to play with this now be sure to install the beta of the Desktop app as well as the beta of the browser extension.

++dave; 1Password Founder

Ohh exciting! I will be installing the beta right away!

Just a warning for people who don't know the grandparent is referring to the extension formerly called 1Password X (now just 1Password in the browser because AgileBits wants you to use that one) which puts ALL OF YOUR PASSWORDS into your browser's memory.

The "classic" 1Password browser extension already unlocked with the desktop app and does not dump your entire vault into browser memory just to fill one password.

I think you might have a misunderstanding of how our browser extension works. Just like our desktop app, your password is only in memory if you copy it to the clipboard, fill it in the browser, or reveal it within the app. Your passwords are always stored encrypted on both the desktop app and browser extension, and we make an active effort to keep secrets out of memory. I hope this clarifies things.

- Jackson Lewis, 1Password Developer

Turns out that yes, I thought that the vaults were encrypted as a whole, but according to the security white paper that changed at some point. So you can decrypt individual passwords.

Thanks for taking the time to check out the white paper!

- Ben, 1Password

I noticed this as well and if I am honest it is a tiny bit annoying when the app is open in another workspace it pulls me to it instead of pulling the app to the current firefox instance. This forces me to bounce back to whichever workspace the firefox was on. Not a huge issue though.

KeepassXC has had this feature for years.

Use the "classic" extension, it already does this. And has the added bonus of not putting ALL of your passwords into your browser memory.

Did the classic extension work on Linux? When I switched from MacOS having to use the (terrible) 1PasswordX was one of the things that really annoyed me.

Sorry, ignore me I was wrong

Reply on news.ycombinator.com