This is a staging forum for AgileBits, not an official support forum. Visit http://discussions.agilebits.com instead.
Keep unlocked on Windows?

Peter321
Junior Member ✭
in Windows Beta
On my Mac, the 1Password password is stored in my OS X keychain, and as long as that is unlocked I don't need to unlock 1Password every time I start a browser.
My PC is already password protected (corporate PC) and it would be nice to have the option of not having to unlock 1Password everytime I start my browser.
I understand it would be less secure, but since my Mac auto logins with a open keychain, it does not seem less secure than that <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/skype_wink.png' class='bbc_emoticon' alt=';-)' />
At least it should be an option for those of us willing to trade a bit of security for convenience.
Is this possible in the current version? - if not, please consider adding it.
My PC is already password protected (corporate PC) and it would be nice to have the option of not having to unlock 1Password everytime I start my browser.
I understand it would be less secure, but since my Mac auto logins with a open keychain, it does not seem less secure than that <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/skype_wink.png' class='bbc_emoticon' alt=';-)' />
At least it should be an option for those of us willing to trade a bit of security for convenience.
Is this possible in the current version? - if not, please consider adding it.
Flag
0
Comments
-
On Mac, things are different because on Mac we can store your master password securely. On Windows, there is no way to store your master password securely. As a matter of fact, we recommend you never store your master password anywhere but your brain.Flag 0
-
Thanks for the link that explains why 1Password behaves so much differently on Windows than it does on the Mac. Because I restart my browser a lot in Windows, I thought 1Password just had some random timeout, but now I understand it has to do with killing the last browser process for which 1Password was unlocked.Flag 0
-
Thanks, craft553!
Note, too, that each browser's process (and the 1Password program's process) maintains its own "copy" of the timer. You could have IE, FF, Chrome, and 1Password open and unlocked simultaneously; each would lock itself automatically based on its own "current copy" of the auto-lock parameters you've defined in 1Password preferences.Flag 0 -
What if I dont need a master password at all. You should really include a setting to remove master password. That's the only thing preventing me purchasing 1pw right now. As Peter321 mentioned, users should have the option to trade a bit of security for convenience.
These are the facts:
[list]
[*]I launch and close my browser 6289683456 times everyday. It's really pain typing the master password in each login.
[*]I'm the only one using my pc so I dont need to hide my logins from anyone else.
[*]I know that my pc is secure enough that I dont need a master password.
[*]1pw is easy to use, has much more features than the built-in firefox password manager, that's why I prefer using 1pw.
[/list]Flag 0 -
[quote name='milkywaif' timestamp='1292316319' post='17540']
I dont need a master password
[/quote]
Please do not go this route. Even if you're the only one using your PC, storing your passwords in plain text is bad practice. Please keep your online identity secure where you can.Flag 0 -
[quote name='Stefan van As' timestamp='1291623473' post='16994']
On Mac, things are different because on Mac we can store your master password securely. [b]On Windows, there is no way to store your master password securely[/b]. As a matter of fact, we recommend you never store your master password anywhere but your brain.
[/quote]
[b]On Windows, you can use Crendial Manager API[/b] (http://msdn.microsoft.com/en-us/library/Aa375177) to access to system credential storage (encrypted and secure). I'm write sample application - it's use system dialog to query for login (useless for us, but present) & password, and store data into system storage:
[attachment=429:credman 1.PNG]
[attachment=430:credman 2.PNG]
It's need to enter password only one time (with "save password" checked) - next time, password will be sent to application without any dialogs <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/smile.gif' class='bbc_emoticon' alt=':)' />
ps helpful article - http://www.neowin.net/news/main/09/03/07/windows-7-exploring-credential-manager-and-windows-vaultFlag 0 -
[quote name='milkywaif' timestamp='1292388804' post='17626']
it's new in windows 7
[/quote]
Then we cannot use it. Our product is supposed to be compatible with Windows XP, and I have heard of some users running it on Windows 2000.Flag 0 -
Please, don't confuse a different things - [b]windows vault[/b], a clear UI in control panel with backup / restore features, and [b]credential manager api[/b] - set of functions are used to store passwords.
Yes, windows vault is introduced in windows 7. But, credential manager api (please try to read MSDN article - http://msdn.microsoft.com/en-us/library/Aa375177, "Requirements" part) is exists in Windows XP <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/smile.gif' class='bbc_emoticon' alt=':)' />
As i say later, code to use credential manager is very simple - about 130 lines of code. For more compatability you may use dynamic linking and call LoadLibrary / GetProcAddress for CredUIPromptForCredentialsW and CredUIConfirmCredentialsW after checking of OS version.Flag 0 -
I use 1Password on my Macbook and love it. My husband refuses to use 1Password on his Windows 7 desktop because of unlocking constantly. He's back to using Roboform again since Roboform doesn't require this <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/sad.gif' class='bbc_emoticon' alt=':(' />
Please make this an option that 'users can disable' if they don't want to be hassled every time. It's very irritating. Some don't care about ultimate security and just want 'convenience'.
I'd sure love to be able to sync passwords on both of our computers. I sure hope this is updated.Flag 0 -
Hi again, Zenara!
Please see [url="http://forum.agile.ws/index.php?/topic/3073-prevent-from-having-to-unlock-over-and-over-again/page__view__findpost__p__19032"]my reply[/url] in the 1Password for Windows forum.
Note that you can cut down the number of master password prompts by (a) adjusting the auto-lock preferences and (b) keeping the browser open rather than closing it after each use.
I hope that helps.Flag 0 -
[quote name='DBrown' timestamp='1295116771' post='19038']Note that you can cut down the number of master password prompts by (a) adjusting the auto-lock preferences and (b) keeping the browser open rather than closing it after each use.
[/quote]
Thanks but my husband and I have 2 separate firefox profiles (so we both have our own bookmarks). So everytime I open my firefox profile unlock on 1password happens. And when my husband opens his firefox profile he has to unlock again :(Flag 0 -
[quote name='DBrown' timestamp='1296178116' post='19636']
Zenara, your invocations of Firefox will be completely separate from your husband's invocations of Firefox, especially as you're running Firefox in different operating systems.
[/quote]
75% of the time I use my Mac which is downstairs. But 25% of the time (and I use both computers alot) I use the Windows desktop which is upstairs. On the same Windows 7 desktop we have 2 separate firefox profiles which makes us have to unlock everytime. In order to get to our own firefox profiles which we've had for 4 years now (not going to change that anytime soon) on the Windows desktop we have to shut down firefox so the other can open their own firefox profile. The reason we do this is to have different bookmarks/settings for each firefox profile.Flag 0 -
So, you use the same Windows account but maintain separate bookmarks and settings in Firefox by having two Firefox profiles? Interesting!
Regardless, any time you close the last window of a program in Windows, you're also quitting that program. As explained in [url="http://help.agile.ws/1Password_Windows/data-locked.html"][i]Why is the 1Password data file locked?[/i][/url] in the [i]FAQ[/i] section of the user's guide, the locked/unlocked status of your 1Password data is maintained separately for each process, so every time you relaunch Firefox you'll also need to unlock your 1Password data.Flag 0 -
[quote name='DBrown' timestamp='1296325036' post='19717']
So, you use the same Windows account but maintain separate bookmarks and settings in Firefox by having two Firefox profiles? Interesting!
[/quote]
Yes that's right. So that's why I'm hoping 1Password for Windows will be updated in the future to provide this as an option. Til then 'on Windows anyways' we're sticking with Roboform <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/sad.gif' class='bbc_emoticon' alt=':(' /> As I said before I do use and love 1Password on my Mac though <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/smile.gif' class='bbc_emoticon' alt=':)' />Flag 0 -
You're using the same Windows user account and the same 1Password keychain, but you do not want to use the same bookmarks?Flag 0
-
[quote name='Stefan van As' timestamp='1296338496' post='19734']
You're using the same Windows user account and the same 1Password keychain, but you do not want to use the same bookmarks?
[/quote]
Yes. My husband and I have done it that way for quite a few years. Makes it easier to get to your own bookmarks faster, while having your own firefox preferences, add-ons, font sizes, personas, etc. As well as not having to log out and log back in to our own gmail accounts, facebook, twitter, ebay, etc. Overall it makes surfing the internet much easier and faster.Flag 0 -
[quote name='Peter321' timestamp='1291622840' post='16992']
it would be nice to have the option of not having to unlock 1Password everytime I start my browser.
[/quote]
Please download 1.0.5.BETA-180
Then enable this setting: File > Preferences (Ctrl+P) > Browsers > "leave extensions unlocked when browsers are closed"
Please let us know how this is working for you.
Thanks, Stefan.Flag 0 -
A few important notes about having this new feature enabled:
[list]
[*]Unlocking your 1Password data in the extension for one browser also unlocks your 1Password data in the extensions for all the other 1Password-enabled browsers.
[*]This is still less secure than the default behavior. You may want to consider tightening up your Auto-Lock settings on the Security tab of 1Password preferences.
[*]As noted below the new option on the Browsers tab of 1Password preferences:
[list]
[*]Enabling this option is not recommended on public or shared computers.
[*]Changing this setting requires restarting any running web browsers.
[*]This setting does not affect the lock status of the 1Password program.
[/list][/list]Flag 0 -
[quote name='Zenara25' timestamp='1295113727' post='19033']
I use 1Password on my Macbook and love it. My husband refuses to use 1Password on his Windows 7 desktop because of unlocking constantly. He's back to using Roboform again since Roboform doesn't require this <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/sad.gif' class='bbc_emoticon' alt=':(' />
Please make this an option that 'users can disable' if they don't want to be hassled every time. It's very irritating. Some don't care about ultimate security and just want 'convenience'.
I'd sure love to be able to sync passwords on both of our computers. I sure hope this is updated.
[/quote]
I'd love this, too. It's tough having these features in other programs and then not having them in 1Password.Flag 0 -
[quote name='CurbedEnthusiasm' timestamp='1304047255' post='25848']
I'd love this, too. It's tough having these features in other programs and then not having them in 1Password.
[/quote]
This is addressed in this thread, specifically by these posts:
[quote]
[quote name='Stefan von Dutch' timestamp='1302505263' post='24569']
Please download [the latest version of 1Password for Windows].
Then enable this setting: File > Preferences (Ctrl+P) > Browsers > "leave extensions unlocked when browsers are closed"
Please let us know how this is working for you.
Thanks, Stefan.
[/quote]
[quote name='DBrown' timestamp='1302558808' post='24610']
A few important notes about having this new feature enabled:
[list]
[*]Unlocking your 1Password data in the extension for one browser also unlocks your 1Password data in the extensions for all the other 1Password-enabled browsers.
[*]This is still less secure than the default behavior. You may want to consider tightening up your Auto-Lock settings on the Security tab of 1Password preferences.
[*]As noted below the new option on the Browsers tab of 1Password preferences:
[list]
[*]Enabling this option is not recommended on public or shared computers.
[*]Changing this setting requires restarting any running web browsers.
[*]This setting does not affect the lock status of the 1Password program.
[/list][/list]
[/quote]
[/quote]Flag 0 -
[quote name='DBrown' timestamp='1304090545' post='25894']
This is addressed in this thread, specifically by these posts:
[/quote]
Thanks David, I think the main issue I see in relation to locking/unlocking is that 1Password requires two logins to use; one for the app and one for the browsers. When I referred to other applications such as Roboform or LastPass, I was giving the example that in those two apps, only one login is required which then unlocks the program in all scenarios. Personally, I don't see the need for the keep extensions unlocked option that was recently implemented. I think it'd make more sense to have a universal lock/unlock feature, where if the app is unlocked, so is the browser extension. If the browser extension is locked, so too would the app.
Just my thoughts based on previous competitor product experience <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/smile.gif' class='bbc_emoticon' alt=':)' />
Regards,Flag 0 -
Thanks David, I read the FAQ and I don't think there's anything in it that I didn't already experience. To me it's a user hassle to enter the Master Password twice, one for each service, especially when MPs are often complex beasts, but each to their own. I see more logic in how Roboform acts in this particular case, where locking/unlocking is universal. Separate processes make it more confusing for a user, but that's just me.Flag 0