{"id":9667,"date":"2014-09-18T15:30:12","date_gmt":"2014-09-18T19:30:12","guid":{"rendered":"http:\/\/mjtsai.com\/blog\/?p=9667"},"modified":"2014-10-04T09:53:59","modified_gmt":"2014-10-04T13:53:59","slug":"1password-5-touch-id-and-safariapp-extensions","status":"publish","type":"post","link":"https:\/\/mjtsai.com\/blog\/2014\/09\/18\/1password-5-touch-id-and-safariapp-extensions\/","title":{"rendered":"1Password 5: Touch ID and Safari\/App Extensions"},"content":{"rendered":"<p>As <a href=\"http:\/\/mjtsai.com\/blog\/2014\/07\/31\/1password-app-extensions\/\">I said<\/a>, I was <em>really<\/em> excited about <a href=\"http:\/\/blog.agilebits.com\/2014\/09\/17\/1password-5-for-ios-is-here-with-app-extensions-touch-id-new-freemium-price\/\">this<\/a>. So far, it has not quite worked out the way I expected.<\/p>\n<p>The <a href=\"http:\/\/blog.agilebits.com\/2014\/09\/17\/1password-5-ios-how-to-enable-the-extension-safari-apps\/\">Safari extension<\/a> prompts me for my master password <a href=\"https:\/\/discussions.agilebits.com\/discussion\/28612\/touch-id-not-working-as-safari-extension\">every single time<\/a>, even though I have set the <a href=\"https:\/\/guides.agilebits.com\/1password-ios-kb\/4\/en\/topic\/touch-id-faq\">master password timeout<\/a> to 30 days.<\/p>\n<p>The app itself sometimes lets me in via Touch ID but usually asks for my master password. I understand that the app needs to be running in order to keep the master password in RAM, but something doesn&rsquo;t seem right here. It happens even in situations where it seems impossible for the app to have been quit by the OS.<\/p>\n<p>There is an <a href=\"https:\/\/discussions.agilebits.com\/discussion\/28608\/touch-id-behavior-question\">option<\/a> in the Advanced preferences to store the master password <a href=\"https:\/\/discussions.agilebits.com\/discussion\/23744\/questions-regarding-1password-4-5s-use-of-the-ios-keychain-for-master-password\">in the iOS keychain<\/a>. This seems like it would address the problem, but it also seems potentially dangerous. It shouldn&rsquo;t be necessary unless there is a memory shortage.<\/p>\n<p>In Riposte (which I&rsquo;m trying since Netbot crashes on iOS 8), there is indeed a button to access 1Password and search for &ldquo;app.net&rdquo;. However, there didn&rsquo;t seem to be a way to get it to enter the username and password; I had to copy and paste them.<\/p>\n<p>Surprisingly, 1Password lets me <a href=\"https:\/\/discussions.agilebits.com\/discussion\/28687\/security-issue-on-ios8-1password-3rd-party-keyboard\">use<\/a> <a href=\"http:\/\/mjtsai.com\/blog\/2014\/09\/18\/ios-8-keyboards\/\">third-party keyboards<\/a> to type usernames and passwords, though not the master password.<\/p>\n<p>Update (2014-09-23): I heard back from AgileBits support. The main issue seems to be that (a) a new instance of the 1Password extension is launched each time it&rsquo;s used, so it cannot remember anything between invocations, and (b) the extension cannot communicate with the running 1Password app to get the master password. Therefore, the extension will prompt for the master password <em>every time<\/em> unless you enable the option in the 1Password app to store the master password in the iOS keychain.<\/p>\n<p>Update (2014-10-04): Even when using the option to store the master password in the iOS keychain, I am finding that the 1Password app pretty regularly prompts me to enter the master password instead of offering me Touch ID.<\/p>","protected":false},"excerpt":{"rendered":"<p>As I said, I was really excited about this. So far, it has not quite worked out the way I expected. The Safari extension prompts me for my master password every single time, even though I have set the master password timeout to 30 days. The app itself sometimes lets me in via Touch ID [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"apple_news_api_created_at":"","apple_news_api_id":"","apple_news_api_modified_at":"","apple_news_api_revision":"","apple_news_api_share_url":"","apple_news_coverimage":0,"apple_news_coverimage_caption":"","apple_news_is_hidden":false,"apple_news_is_paid":false,"apple_news_is_preview":false,"apple_news_is_sponsored":false,"apple_news_maturity_rating":"","apple_news_metadata":"\"\"","apple_news_pullquote":"","apple_news_pullquote_position":"","apple_news_slug":"","apple_news_sections":"\"\"","apple_news_suppress_video_url":false,"apple_news_use_image_component":false,"footnotes":""},"categories":[2],"tags":[284,905,31,904,26,573],"class_list":["post-9667","post","type-post","status-publish","format-standard","hentry","category-technology","tag-1password","tag-extensions","tag-ios","tag-ios-8","tag-iosapp","tag-touch-id"],"apple_news_notices":[],"_links":{"self":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/9667","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/comments?post=9667"}],"version-history":[{"count":4,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/9667\/revisions"}],"predecessor-version":[{"id":9745,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/9667\/revisions\/9745"}],"wp:attachment":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/media?parent=9667"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/categories?post=9667"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/tags?post=9667"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}