Feature Request: Autofill

Samplex · November 2010

<div class="IPBDescription">unprompted filling of login forms</div>HI,

Im trying out 1Password on the Mac to see it it working good before i buy it.. Only one thing stops me from buying it: [b]Automatically logging me in to websites[/b]

Example gmail:

[list]

[*]I go to gmail.com

[*]Fill in my Username and Password

[*]I do not enable the option "Stay signed in"

[*]Click on the "Sign in" button and it logs in.

[*]1Password popup appears and ask me "Save this gmail.com login to 1Password?" and i click Save.

[*]Im logged in to my mailbox and click on "Sign Out" and close my browser

[*]Start up my browser again and go to gmail.com

[*]At the login page NOTHING happens.. i have to click the [1P] button in my browser and choose "Fill & Submit Gmail.com" and then it logs in.... <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/sad.gif' class='bbc_emoticon' alt=':(' />

[/list]

How can I let 1Password log me in to gmail.com without clicking/using the 1P Fill & Submit Gmail.com" or using shortcuts commands ????????????

Because it learned the site with its credentials allready so why does it not log me in automatically?

[Deleted User] · November 2010

Hi Samplex,

First of all, welcome to the forums, great to have you with us.

1Password doesn't actually automatically fill your Logins. Safari has a feature called Autofill that automatically logs you into a web site when the page loads and often people expect 1Password to act in exactly the same way.

Instead, you must select the login you wish to use by clicking 1Password's toolbar icon in your web browser, using the right-click 1Password contextual menu or by typing cmd-\ on your keyboard. This not only makes it possible to maintain multiple logins for the same web site, but also adds an extra layer of security, since your information will never be filled without your consent.

If you're looking for functionality that is similar to Safari's, we recommend 1Password's Go & Fill function which also has a customisable keyboard shortcut. You can read more about it and see it in action in our user-guide here:

http://help.agile.ws/1Password3/go_and_fill.html

Hope that helps,

[quote name='Samplex' timestamp='1289061929' post='14645']

HI,

Im trying out 1Password on the Mac to see it it working good before i buy it.. Only one thing stops me from buying it: [b]Automatically logging me in to websites[/b]

Example gmail:

[list]

[*]I go to gmail.com

[*]Fill in my Username and Password

[*]I do not enable the option "Stay signed in"

[*]Click on the "Sign in" button and it logs in.

[*]1Password popup appears and ask me "Save this gmail.com login to 1Password?" and i click Save.

[*]Im logged in to my mailbox and click on "Sign Out" and close my browser

[*]Start up my browser again and go to gmail.com

[*]At the login page NOTHING happens.. i have to click the [1P] button in my browser and choose "Fill & Submit Gmail.com" and then it logs in.... <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/sad.gif' class='bbc_emoticon' alt=':(' />

[/list]

How can I let 1Password log me in to gmail.com without clicking/using the 1P Fill & Submit Gmail.com" or using shortcuts commands ????????????

Because it learned the site with its credentials allready so why does it not log me in automatically?

[/quote]

Samplex · November 2010

Thank you for the quick answer..

Oke to bad a 40 USD program can't even do that.

[Deleted User] · November 2010

[quote name='Samplex' timestamp='1289064812' post='14653']

Thank you for the quick answer..

[/quote]

Samplex,

I'm sorry to hear that, but at the end of the day it really is your decision. As I mentioned we don't feel that auto-login is really a good thing, at least not by default, as it opens the door for someone to easily use your computer to get into your saved logins without having to actually invoke 1Password at all.

I use the 'Go & Fill' feature every day, and this works incredibly well and I know that I've authenticated with 1Password and so I'm the only one who can use this feature on my Mac.

Thanks for your consideration,

NovaScotian · November 2010

[quote name='stu' timestamp='1289065058' post='14654']

Samplex,

I'm sorry to hear that, but at the end of the day it really is your decision. As I mentioned we don't feel that auto-login is really a good thing, at least not by default, as it opens the door for someone to easily use your computer to get into your saved logins without having to actually invoke 1Password at all.

I use the 'Go & Fill' feature every day, and this works incredibly well and I know that I've authenticated with 1Password and so I'm the only one who can use this feature on my Mac.

Thanks for your consideration,

[/quote]

I think the key here is that 1Password is designed for maximum security, not for log-in convenience. The two are mutually exclusive. If you're shooting for easy login convenience use the browser feature. If you want security with only a single password to remember for the many you might have out there, use 1Password.

[Deleted User] · November 2010

[quote name='NovaScotian' timestamp='1289067375' post='14658']

I think the key here is that 1Password is designed for maximum security, not for log-in convenience. The two are mutually exclusive. If you're shooting for easy login convenience use the browser feature. If you want security with only a single password to remember for the many you might have out there, use 1Password.

[/quote]

That's a great point, 1Password is all about making it possible to use secure passwords for everything and have a single password to get access to these. Then again, with 'Go & Fill' and the '1-Click Login Bookmarks' feature in Safari and Firefox - by dragging a login from 1Password to your bookmarks bar / folder, you can have a great mix of both.

khad · November 2010

Indeed, NovaScotian. Although, I would say that while the theoretical limits of security and convenience may be mutually exclusive, every solution in the real world works on a continuum that strikes a balance between the two (since nothing can ever be "absolutely" secure or convenient). In this area, we have chosen to lean more heavily towards security.

As Stu points out, Go & Fill is our attempt to have the best of both worlds. <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/skype_smile.png' class='bbc_emoticon' alt=':-)' />

jpgoldberg · November 2010

[quote name='khad' timestamp='1289070164' post='14662']

I would say that while the theoretical limits of security and convenience may be mutually exclusive, every solution in the real world works on a continuum that strikes a balance between the two[/quote]

I am going to disagree with Khad here just because I always like arguing with him <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/skype_wink.png' class='bbc_emoticon' alt=';-)' />

Sometimes we have to make a choice between security and convenience, but other times convenience is a necessary ingredient of security.

Think about how people are supposed to work [i]without[/i] 1Password. We are told to use strong, unique passwords for every site and to not write them down anywhere. Such a system would be secure if it weren't so inconvenient that nobody could actually follow such a system. It is the [i]inconvenience[/i] of that system that makes it so insecure.

By adding convenience, 1Password adds to people's security. A security tool that doesn't get used because it is inconvenient provides no security at all. This is one of the central ideas behind 1Password. We want to make it easy and fun to do the secure thing.

In this particular case, the balance is really between automation and user control. There are some task that really shouldn't be fully automated unless the user makes it absolutely clear that they do want that automated. In this case, Stu's suggestion of created a browser bookmark that calls 1Password's Go & Fill mechanism (and then with Auto-submit turned on) provides the user just a way to say, "for this site, I want 1Password to completely login me in without any further confirmation or input from me."

Cheers,

-j

khad · November 2010

Jeff,

<img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/tongue.gif' class='bbc_emoticon' alt=':P' />

Respectfully,

jpgoldberg · November 2010

Well, there's no arguing with that.

I concede defeat, Khad.

-j

camner · November 2010

[quote name='stu' timestamp='1289068884' post='14660']

That's a great point, 1Password is all about making it possible to use secure passwords for everything and have a single password to get access to these. Then again, with 'Go & Fill' and the '1-Click Login Bookmarks' feature in Safari and Firefox - by dragging a login from 1Password to your bookmarks bar / folder, you can have a great mix of both.

[/quote]

I apologize for my ignorance here....I certainly know what 'Go & Fill' is, as I use it all the time. What is '1-Click Login Bookmarks' ? Are you saying I can open 1P and drag an entry to the bookmarks bar? Wow! (But only suitable for low-security sites, I'd imagine!)

khad · November 2010

[quote name='camner' timestamp='1289801360' post='15145']

I apologize for my ignorance here....I certainly know what 'Go & Fill' is, as I use it all the time. What is '1-Click Login Bookmarks' ? Are you saying I can open 1P and drag an entry to the bookmarks bar? Wow![/quote]

You betcha. [url="http://help.agile.ws/1Password3/oneclick_bookmarks.html"]1-Click Bookmarks[/url] make short order of logging in to a site!

[quote] (But only suitable for low-security sites, I'd imagine!)[/quote]

Not at all. It is only available when 1Password is installed and interacts with 1Password in the same secure manner as the browser extensions. Secure [i]and[/i] convenient. Who knew?! <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/skype_smile.png' class='bbc_emoticon' alt=':-)' />

brenty · November 2010

I'm glad I stumbled into this discussion! It's always good to have another perspective, and you guys made some great points!

[quote name='jpgoldberg' timestamp='1289164948' post='14716']

By adding convenience, 1Password adds to people's security. A security tool that doesn't get used because it is inconvenient provides no security at all. This is one of the central ideas behind 1Password. We want to make it easy and fun to do the secure thing.

[/quote]

JP, you just blew my mind. It's easy for me to get caught up in all the fancy security measures that are available, but at the end of the day the best one is whatever I can convince my girlfriend to actually use...

I must say, though: in some cases I am completely secure precisely [i]because[/i] of the inconvenience of the measures I've put in place. If I could bring myself to secure my credit cards so completely I would save so much money because it would be such a hassle to use them! Hmm. <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/huh.gif' class='bbc_emoticon' alt=':huh:' />

camner · November 2010

[quote name='khad' timestamp='1289862184' post='15180']

You betcha. [url="http://help.agile.ws/1Password3/oneclick_bookmarks.html"]1-Click Bookmarks[/url] make short order of logging in to a site!

Not at all. It is only available when 1Password is installed and interacts with 1Password in the same secure manner as the browser extensions. Secure [i]and[/i] convenient. Who knew?! <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/skype_smile.png' class='bbc_emoticon' alt=':-)' />

[/quote]

So does this mean that if 1Password is not "activated" by my entering my "master password" than going to one of these "1-Click Bookmarks" will NOT log me in until I've entered the Master Password! Wow, yes, convenient AND secure, if so!

khad · November 2010

Indeed, camner. It's just like using the Go & Fill feature. But don't take my my word for it. Give it a try! <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/skype_wink.png' class='bbc_emoticon' alt=';-)' />

jpgoldberg · November 2010

[quote name='brenty (toromei)' timestamp='1289875457' post='15199']

JP, you just blew my mind.[/quote]

Thanks! I hope it didn't make too much of a mess for you to pick up the pieces of a blown mind.

[quote]

It's easy for me to get caught up in all the fancy security measures that are available, but at the end of the day the best one is whatever I can convince my girlfriend to actually use...[/quote]

This is not to say that the security of the tool doesn't matter. After all a poorly secured password management tools would put all of your eggs in a poorly secured basket. What we need to do is try to distinguish between the illusion of security (or "security theater" as some have called it) from actual security.

Let me give an example of security theater from a different domain. Shortly after 9/11 US airports had National Guard troops stationed in pairs at strategic (and highly visible) points in US airports. They were carrying rifles. This actually weakens security. It means that there are rifles there for the taking if one wanted to go an a shooting spree in an airport. All you had to do was over-power the guardsmen. The good news is that the the higher ups weren't completely stupid, so the rifles did not have live ammunition. They were there just for show. And not for show to potential attackers, but for show for the traveling public. Pure security theater.

An example of the opposite is the security on iOS. It is deceptively simple to the user who could easily imagine that their data is easily available to a thief who gets hold of their iPhone, iPod or iPad. But the security architecture of iOS (and in particular iOS 4) makes the system far more secure than it first appears. This is why we are happy to have 1Password on iOS store what it needs for syncing within the iOS keychain. Likewise, there is a lot going on under the hood of 1Password to provide security.

[quote]

I must say, though: in some cases I am completely secure precisely [i]because[/i] of the inconvenience of the measures I've put in place. If I could bring myself to secure my credit cards so completely I would save so much money because it would be such a hassle to use them! Hmm. <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/huh.gif' class='bbc_emoticon' alt=':huh:' />

[/quote]

Great example! Tying yourself to the mast as Odysseus did to avoid being enticed by the sirens is a form of security indeed. And there are plenty of cases where security and convenience are in conflict. But my attempt was the challenge that truism that they must typically be in conflict.

Cheers,

-j

camner · November 2010

[quote name='khad' timestamp='1289880605' post='15207']

Indeed, camner. It's just like using the Go & Fill feature. But don't take my my word for it. Give it a try! <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/skype_wink.png' class='bbc_emoticon' alt=';-)' />

[/quote]

Well, not surprisingly, you're right! I guess I only tried the feature when I was already logged in to 1P. On my home computer I have a very long (many hour) time interval set before 1P forces me to put in my Master Password again, so I didn't pick up the fact that 1P requires the Master Password to use the '1-Click bookmark' feature.

Thanks!

brenty · November 2010

[quote name='jpgoldberg' timestamp='1289884138' post='15217']

Thanks! I hope it didn't make too much of a mess for you to pick up the pieces of a blown mind.

[/quote]

The pleasure is all mine. <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/laugh.gif' class='bbc_emoticon' alt=':lol:' />

[quote]

Tying yourself to the mast as Odysseus did to avoid being enticed by the sirens is a form of security indeed. And there are plenty of cases where security and convenience are in conflict. But my attempt was the challenge that truism that they must typically be in conflict.

[/quote]

+1 for referencing both Bush era airport "security" and Homer to make two equally salient points about computer security. Just wow. <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/blink.gif' class='bbc_emoticon' alt=':blink:' />

khad · November 2010

Also consider freezing your credit cards in big blocks of ice.

Surrounded by a moat.

With sharks.

With lasers.

Didjo · November 2010

Hello,

First, thanks a lot for this marvelous soft. It is just essential.

But I am surprised about something : there is no autofill option ? I mean, a way to fill the website log-in forms automatically, without going through right click > 1P > fill ?

Thank you !

khad · November 2010

Welcome to the forums, Didjo! I have merged your post with the appropriate thread. Please let me know if you have additional questions or concerns. <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/skype_smile.png' class='bbc_emoticon' alt=':-)' />

Cheers!

Didjo · November 2010

Hi !

Thanks for your quick answer.

Actually I did not read the whole subject (even if I would have time to !), but I understood that it is not a feature you want to be in 1P. But there is one thing I do not understand so. E.G. :

My Wifi hot-point back office require an htaccess connection, with the little pop-up that ask me for a login an a password wich are saved in 1P. Well, when I go to the administration URL, an alert ask me to enter my 1P master password and fill automatically this pop-up ! I just have to click OK.

This behaviour is just perfet to me ! Why does 1P not do that with all websites ? An alert that ask me if I want to fill my logins, which one and my master pass !

Should be so cool...

(oh ! and. Excuse my english...)

khad · November 2010

[url="http://forum.agile.ws/index.php?/topic/2495-single-sign-on-with-1password/page__view__findpost__p__14648"]Stu's first reply in this thread[/url] sums up the situation pretty well if you don't have the time or inclination to read the whole thing. <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/skype_smile.png' class='bbc_emoticon' alt=':-)' />

When you are logging in to any website, simply press ⌘\ on your keyboard to have 1Password automatically log you in. If 1Password is already unlocked, you are all set. (Otherwise, you will have to enter your master password to unlock the first time.) Also consider Stu's [url="http://help.agile.ws/1Password3/go_and_fill.html"]Go & Fill[/url] suggestion and [url="http://help.agile.ws/1Password3/oneclick_bookmarks.html"]1-Click Bookmarks[/url].

I hope that helps. Please let me know. <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/skype_smile.png' class='bbc_emoticon' alt=':-)' />

Didjo · December 2010

Well, the 1-Click Bookmarks method effectively do the job. So cool ! But I am still expecting an auto-fill option !

Thank you very much !

khad · December 2010

I'm glad to know that 1-Click Bookmarks helped out! <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/skype_smile.png' class='bbc_emoticon' alt=':-)' />

sillyshy · May 2011

I have the auto fill option enabled and it never auto fills the username and password how come?

[Deleted User] · May 2011

[quote name='sillyshy' timestamp='1306618874' post='27998']

I have the auto fill option enabled and it never auto fills the username and password how come?

[/quote]

Hello sillyshy and welcome to the Forums!

When I've experienced your issue with Safari, it has almost always been because the URL listed in my saved Login in 1Password is different than the URL of the site I'm trying to autofill/submit. Often, the difference can be minor, but it matters on some sites.

Additional issues have been caused by sites using Flash and using Java: [url="http://forum.agile.ws/index.php?/topic/4095-sun-java-system-access-manager/page__p__23628"]Sun Java System Access Manager[/url]

Would you please provide some more information regarding your issue? Specifically, what site(s) do you experience this problem with? If "all websites", please reply with the URLs for at least a few of them.

Looking forward to your reply.

Cheers!

Brandt

Also: please indicate which version of OS X, Safari and 1P that you are using.

khad · May 2011

Hey sillyshy! I moved your post to this thread since I believe you are asking about autofill (on pageload like most browsers' built-in password management) rather than the kind of form filling that 1Password currently performs which requires you to either select the login from the 1P toolbar button or use the ⌘\ keyboard shortcut.

Please take a look at the rest of this thread and let me know if you have any additional questions or if I have misunderstood your question.

Thanks!

[Deleted User] · May 2011

[quote name='khad' timestamp='1306731885' post='28099']

Hey sillyshy! I moved your post to this thread since I believe you are asking about autofill (on pageload like most browsers' built-in password management) rather than the kind of form filling that 1Password currently performs which requires you to either select the login from the 1P toolbar button or use the ⌘\ keyboard shortcut.

Please take a look at the rest of this thread and let me know if you have any additional questions or if I have misunderstood your question.

Thanks!

[/quote]

I think I need to stay away from auto fill questions.

Let's keep the count at 0-2. <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/smile.gif' class='bbc_emoticon' alt=':)' />

Feature Request: Autofill

Comments