How do I make 1Password login automatically to certain sites?

switters

I have a blog that I update a few times a day. I'm not particularly concerned about security with it. I want to stay logged in anytime my browser is open. Right now, every time I go to the blog (a self-hosted Wordpress blog) I have to enter my username and password again. How do I stop this from happening?

brenty

Hopefully someone will step in to correct me if I am wrong, but it seems to me that the security model that 1Password uses precludes true selective automatic login. You can use the "Go and FIll Login" feature (or a keyboard shortcut to fill and submit once you're on the appropriate page,) but unless you select "Never prompt for Master Password" in the Security preference tab, you will still have to enter it when you do so, unless you have already unlocked it.



Since the idea itself completely negates security, you could just have the browser save the password. That's generally a terrible idea, but, if you're intent on sacrificing security for convenience, be sure to only save the login credentials for that specific site alone and use a unique username and password in case of a compromise. In the past, there have been attacks that used cross-site scripting to harvest login information from several browsers, and chances are we will see similar exploits in the future.

switters

[quote name='brenty (toromei)' timestamp='1287044711' post='13195']

Hopefully someone will step in to correct me if I am wrong, but it seems to me that the security model that 1Password uses precludes true selective automatic login. You can use the "Go and FIll Login" feature (or a keyboard shortcut to fill and submit once you're on the appropriate page,) but unless you select "Never prompt for Master Password" in the Security preference tab, you will still have to enter it when you do so, unless you have already unlocked it.



Since the idea itself completely negates security, you could just have the browser save the password. That's generally a terrible idea, but, if you're intent on sacrificing security for convenience, be sure to only save the login credentials for that specific site alone and use a unique username and password in case of a compromise. In the past, there have been attacks that used cross-site scripting to harvest login information from several browsers, and chances are we will see similar exploits in the future.

[/quote]



It is possible to set up 1Password to allow automatic log-in for sites. I know this because I do it with one of my WordPress blogs. The problem I'm having is with another WordPress blog. That's why it's so strange. The settings are the same in 1P on both, but one logs me in automatically, and the other doesn't.

khad

[quote]The settings are the same in 1P on both, but one logs me in automatically, and the other doesn't. [/quote]

Please ensure that the Submit setting for the particular login is NOT set to "Never." The default (and preferred) setting is "If Autosubmit is ON."



Let me know how it goes! Thanks! <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/skype_smile.png' class='bbc_emoticon' alt=':-)' />

brenty

[quote name='switters' timestamp='1287063698' post='13208']

It is possible to set up 1Password to allow automatic log-in for sites.

[/quote]



I was speaking in terms of logging in without any user input. I'm still prompted to enter my Master Password after selecting Fill & Submit. I could absolutely save the Master Password to my Keychain to streamline the process, but for me that kind of negates much of the benefit of 1Password. That's what I was getting at.



That certainly is a strange problem though. Is it possible that perhaps there is a conflict with 1Password having two sets of login credentials with similar addresses?

khad

I am still interested if my suggestion was the solution. I'm not sure I completely understood the question. Some folks equate "automatically login" with "automatically fill and submit." 1Password does require some intentionality. You don't just get booted into a site before even seeing the login page. <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/skype_smile.png' class='bbc_emoticon' alt=':-)' /> Fill and Submit must either be selected from the browser menu or invoked with Command-\ (or whatever keyboard shortcut you have customized).



I'm curious to hear back from switters — nice username, by the way! — or perhaps he is busy being [url="http://en.wikipedia.org/wiki/Fierce_Invalids_Home_from_Hot_Climates"]fiercely at home in a hot climate[/url]. <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/skype_bigsmile.png' class='bbc_emoticon' alt=':-D' />

switters

[quote name='khad' timestamp='1287867322' post='13929']

I am still interested if my suggestion was the solution. I'm not sure I completely understood the question. Some folks equate "automatically login" with "automatically fill and submit." 1Password does require some intentionality. You don't just get booted into a site before even seeing the login page. <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/skype_smile.png' class='bbc_emoticon' alt=':-)' /> Fill and Submit must either be selected from the browser menu or invoked with Command-\ (or whatever keyboard shortcut you have customized).



I'm curious to hear back from switters — nice username, by the way! — or perhaps he is busy being [url="http://en.wikipedia.org/wiki/Fierce_Invalids_Home_from_Hot_Climates"]fiercely at home in a hot climate[/url]. <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/skype_bigsmile.png' class='bbc_emoticon' alt=':-D' />

[/quote]



Hi Khad,



I did mean exactly that - being logged into a site without seeing the login page. The site in question is my WordPress blog, which I update multiple times throughout the day. It's a pain to have to login every time. I don't view it as a particularly high security risk; I'm perfectly happy to be logged in automatically. After following some of the suggestions above and restarting my computer, it is now working for both of my WordPress blogs.



P.S. Very few people get the Switters reference. High five to another Tom Robbins fan.

khad

Thanks for writing back to let me know everything is working well. That's great! <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/skype_smile.png' class='bbc_emoticon' alt=':-)' />



Tom Robbins FTW!

stig77

First off, I hope my topic title is somewhat correct. I'll include a screenshot that might clarify what I'm referring to.



My university requires my username and password on many different secure/user restricted websites via www1.baylor.edu:443. As you can see in the screen shot, my user name and password are not automatically submitted when the prompt appears. (Auto submit is turned on in 1Password.) Instead, I need to click on the 1P icon, which then lists several potential passwords. Is it possible to configure 1Password so that my username and password are submitted every time this box appears? It seems to me that this was the case when I first installed 1Password, but changed after I switched to a new Macbook. Thanks.

khad

Hey, stigg77! I have merged your post with the appropriate thread. Please see above and let me know if you have any additional questions! The TL;DR version is: press ⌘\ to log in to any website with the 1Password extension installed in your browser. <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/skype_smile.png' class='bbc_emoticon' alt=':-)' />

stig77

[quote name='khad' timestamp='1297396154' post='20400']

Hey, stigg77! I have merged your post with the appropriate thread. Please see above and let me know if you have any additional questions! The TL;DR version is: press ⌘\ to log in to any website with the 1Password extension installed in your browser. <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/skype_smile.png' class='bbc_emoticon' alt=':-)' />

[/quote]





Thanks for the reply, but this isn't quite it. I think the issue is that there are a series of subscription-based resources that are available through the university. I have one username and password with the university that provides access to all of them. (Essentially, I'm logging on to an external site using Baylor's subscription via my Baylor password.) Each of these subscription based sites begins with https://www1.baylor.edu/. I use several of these sites frequently, so I have stored them as separate logins in 1password. (See the screenshot I uploaded previously.) The problem is that when I attempt to login to a subscription-based site that I have not stored in 1Password, I am prompted to enter one of these 1Password logins even though they all have the same username and password. (Again, you can see the list in the screenshot.)



I guess what I am wondering is this: is it possible for 1Password to automatically enter the username and password for all sites that begin with https://www1.baylor.edu/ no matter what else follows the /? Almost like a wildcard search using: https://www1.baylor.edu/* enters a username and password for all sites that begin with https://www1.baylor.edu/



I hope this is clearer! It seems a bit complicated and I've probably spent more time trying to figure out a solution than I would have saved by using things as is!

khad

Ah. I see. It does sound a bit more complicated. My apologies.



If the credentials are identical, perhaps delete the duplicates and create a single unified login with the correct credentials. You could also change the display value for the additional login items to "Never display in browser" or "For Web pages only" (unless they are also for HTTP Auth prompts as the one in the screenshot is).



I hope that helps. Perhaps I am misunderstanding. Please let me know.

stig77

[quote name='khad' timestamp='1297471115' post='20461']

Ah. I see. It does sound a bit more complicated. My apologies.



If the credentials are identical, perhaps delete the duplicates and create a single unified login with the correct credentials. You could also change the display value for the additional login items to "Never display in browser" or "For Web pages only" (unless they are also for HTTP Auth prompts as the one in the screenshot is).



I hope that helps. Perhaps I am misunderstanding. Please let me know.

[/quote]





Got it working! I changed all of the "extra" logins that appeared on the HTTP Auth prompt to "For Web Pages Only" and now my username and password are automatically filled in. It still does not auto submit (I have it set to "always"), but that is not a big deal, since I only need to press "Return." My "extra" logins all work using Go and Fill Login. Perfect.



Thanks for the help.

MikeT

Hi stig77,



Thanks for the update and I’m glad that works out well for you. Unfortunately, it is not possible to auto-submit into the HTTP authentication windows, you’ll need to press the enter key manually as you mentioned.