OPening login shows password in the fields section

stephen.oakman

Hi,



Just trying 1password as reviewing for use across the company.



One issue I have is that opening a browser login in 1password shows the value of the password field in clear text. I was hoping it would be masked out (anywhere where a password is initially 'shown' it should be masked out). When demoing how it works to a colleague it doesn't go down to well having your password clearly shown! Especially if I haven't get got round to changing my passwords to something more secure yet <img src='http://forum.agilebits.com/public/style_emoticons/<#EMO_DIR#>/smile.png' class='bbc_emoticon' alt=':)' />



Thanks



+Steve

khad

Welcome to the forums, Steve! Thanks for taking the time to contact us.



It sounds like perhaps you have toggled the [b]View > Conceal Passwords[/b] setting off. Does it help if you turn that back on from the menu bar?



You are referring to the main application, correct? If not, to which browser extension are you referring. Passwords should always be concealed by default (although you can intentionally reveal them in the main application by holding down the CTRL+R keyboard shortcut).



With some more information, I'm sure we can get it sorted out. <img src='http://forum.agilebits.com/public/style_emoticons/<#EMO_DIR#>/smile.png' class='bbc_emoticon' alt=':)' />

stephen.oakman

Hi Khad,



Thanks for the reply. In answer, this is within the main 1password windows application and all I've done so far is install and start using it. I didn't even notice the View->Conceal Passwords setting but it is switched on (as that's the default) but when editing a password from the Logins left tab (by double clicking it) it shows the password as part of the fields list. I was expecting them to be concealed as it can pickup it's a password field on the form based on it's type.



It sounds like this is probably a bug then. I am happy to work on helping resolve this by supplying whatever information I can. To help start, the version I am using is 1.0.9.296.



Regards



+Steve

khad

Do you mean that the password is shown in the details view under the list of all your Logins like this?



[img]https://img.skitch.com/20120707-jssmhdrn1q6nyphjwtyfejpxy3.png[/img]







Or that it is shown when you are [b]editing[/b] an item like this?



[img]https://img.skitch.com/20120707-fmfk1xx37jprx6nfpsysc96bhc.png[/img]







If it is neither of those, please [b]provide the steps[/b] I can take to reproduce the issue. A [b]screenshot[/b] would also be helpful. <img src='http://forum.agilebits.com/public/style_emoticons/<#EMO_DIR#>/smile.png' class='bbc_emoticon' alt=':)' />



Cheers,

stephen.oakman

Hi Khad,



Thanks for getting back to me and I apologise for my delay in responding.



Regarding the plain text password field, it's the last one - which as I can see from the screen shot is also in plain text. I was hoping that this would be masked as well as it should be possible as 1password should know that that field was an input type=password field when it intercepted the form post originally. Is this scheduled to be changed at any point?



Regards



+Steve

khad

The password is intentionally revealed when in [b]Edit mode[/b]. Otherwise how could you see what you were typing if you were editing the password?



That said, in 1Password for Mac we do actually conceal the password — even in Edit mode — unless the password field iteself is being [i]actively[/i] edited. I'll mention this to the developers. It wouldn't hurt to mirror this behavior in Windows.



For now, if you don't wish to reveal it, don't try to edit your data while someone is looming over your shoulder. <img src='http://forum.agilebits.com/public/style_emoticons/<#EMO_DIR#>/smile.png' class='bbc_emoticon' alt=':)' />



Please let me know if there is anything else I can help with.