Firefox Sync

gondoi

<div class="IPBDescription">Ability to use both Firefox Sync and 1Password</div>Hello,



I've been using Firefox Sync since it was in beta as Weave, and I have a ton of information stored there. I also recently got 1Password, and would like to use it. The problem is that I want to use both because I use Linux a lot as well as a Mac.



Is there any way to use both Firefox Sync and 1Password at the same time?



Thank you,

BK

khad

Welcome to the forums, BK.



We generally recommend disabling browsers' built-in password management both (1) to avoid confusion — "I swear I saved that already!" — and (2) for extra security — Google "[url="http://www.google.com/search?q=browser+password+security"]browser password security[/url]." There is no technical reason you cannot have both enabled, though.



Please let me know if you have any trouble with 1Password in this configuration.



Don't forget that you can also use 1Password for Windows under Wine in Linux. While 1Password is not supported when running in Wine, I have used it without any major hiccups. With Dropbox syncing in Linux, you can have all your 1Password data available.



Also, consider [url="http://help.agile.ws/1Password3/1passwordanywhere.html"]1PasswordAnywhere[/url] if all you need is read-only access to your 1Password data in Linux.



I hope that helps. Please let me know how it turns out.

benfdc

[quote name='khad' timestamp='1301031514' post='23159']

Welcome to the forums, BK.



We generally recommend disabling browsers' built-in password management both (1) to avoid confusion — "I swear I saved that already!" — and (2) for extra security — Google "[url="http://www.google.com/search?q=browser+password+security"]browser password security[/url]." There is no technical reason you cannot have both enabled, though.

[/quote]

This should be the user's choice. I like being able to import passwords from Firefox to 1P, but it would also be nice to be able to go the other way. To give one simple example, you probably have many customers who use Firefox at work but can't get approval from IT to install 1Password.



And if you want to talk about security, there are three ways at the moment to export data from 1Password: text, csv, and 1pif. All of them export to plaintext. You can export compiled databases in two formats (html and pdb), but you can't easily extract the data from them either. Direct export to the Firefox password manager would be far more secure than the options presently available to users.



—Ben F

khad

[quote]This should be the user's choice.[/quote]

It certainly should be, which is why 1Password does nothing to disable this on your behalf. <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/skype_wink.png' class='bbc_emoticon' alt=';-)' />



[quote]I like being able to import passwords from Firefox to 1P, but it would also be nice to be able to go the other way. To give one simple example, you probably have many customers who use Firefox at work but can't get approval from IT to install 1Password.[/quote]

[url="http://forum.agile.ws/index.php?/topic/4091-feature-request-export-logins-to-browser/"]Noted[/url].



[quote]And if you want to talk about security, there are three ways at the moment to export data from 1Password: text, csv, and 1pif. All of them export to plaintext. You can export compiled databases in two formats (html and pdb), but you can't easily extract the data from them either. Direct export to the Firefox password manager would be far more secure than the options presently available to users.[/quote]

I was referring to data storage and known exploits, not transferring data unencrypted. <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/laugh.gif' class='bbc_emoticon' alt=':lol:' />



Exporting to CSV from [i]any[/i] password manager for the purpose of transferring data is not secure.



All things being equal, however, [i]storing[/i] your passwords in a password manager divorced from the browser is safer than storing them in a browser's built-in password manager. There have been numerous exploits of browsers' built-in password managers over time which were simply not possible against 1Password.



I hope that helps clarify what I was intending. I think import/export is a separate topic. <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/skype_smile.png' class='bbc_emoticon' alt=':-)' />