Security Danger Chrome16

gummi

1.

Open Chrome 16xxx



2.

Open 1Password-Extension in Chrome



3.

Login with 1Passwort at any 1Password-saved URL



4.

Close Chrome completly



5.

Restart of Chrome



6.

Go to any 1Password-saved URL



7.

Open 1Password-extension in Chrome and you´ll see that all URL´s are visible

without entering the Password again while "Keep extensions unlock if Browsers are closed" is unchecked

DBrown

Welcome to the forum, gummi!



What's the current setting of the [b]Hide my Logins when 1Password is locked[/b] option on the Logins tab of 1Password preferences? If it's disabled, try enabling it, and let us know if that gives you the behavior you'd prefer.



(Note that [i]showing[/i] you the Logins doesn't allow you to [i]use[/i] them without your providing the master password.)

Stefan von Dutch

[quote name='gummi' timestamp='1323904733' post='55519']

re-open Chrome and you'll see that all URL´s are visible without entering the Password again

[/quote]



This is the designed behavior because in our new extension architecture (currently running inside Safari and Chrome), "universal unlock" is turned on. You can turn this feature off here:

1. click the 1P button in Safari or Chrome

2. click the gear icon in the lower-left corner

3. click on the "security" button

4. un-check "enable universal unlock"



[quote name='gummi' timestamp='1323904733' post='55519']

while "Keep extensions unlocked if Browsers are closed" is unchecked

[/quote]



You're right - this feature is IE and Firefox-only. I'm going to update our UI and correct this.

Stefan von Dutch

David,



[quote name='DBrown' timestamp='1323912319' post='55523']

What's the current setting of the [b]Hide my Logins when 1Password is locked[/b] option on the Logins tab of 1Password preferences?

[/quote]



I'm afraid this setting has no influence on our new extension architecture (currently running in Safari and Chrome). Starting with 1.0.9.245, this setting now reads: "Internet Explorer and Firefox only"

gummi

Thank you very much for the fast troubleshooting <img src='http://forum.agilebits.com/public/style_emoticons/<#EMO_DIR#>/skype_smile.png' class='bbc_emoticon' alt=':-)' />



[color=#282828][font=helvetica, arial, sans-serif]un-check "enable universal unlock" works fine [/font][/color]

DBrown

[quote name='Stefan von Dutch' timestamp='1323940901' post='55534']

...[the [b]Hide my Logins when 1Password is locked[/b] option] has no influence on our new extension architecture (currently running in Safari and Chrome). Starting with 1.0.9.245, this setting now reads: "Internet Explorer and Firefox only"

[/quote]



Good to know! I'm having trouble keeping up with the changes.



Thanks, Stefan.