This is a staging forum for AgileBits, not an official support forum. Visit http://discussions.agilebits.com instead.
Security Danger Chrome16
1.
Open Chrome 16xxx
2.
Open 1Password-Extension in Chrome
3.
Login with 1Passwort at any 1Password-saved URL
4.
Close Chrome completly
5.
Restart of Chrome
6.
Go to any 1Password-saved URL
7.
Open 1Password-extension in Chrome and you´ll see that all URL´s are visible
without entering the Password again while "Keep extensions unlock if Browsers are closed" is unchecked
Open Chrome 16xxx
2.
Open 1Password-Extension in Chrome
3.
Login with 1Passwort at any 1Password-saved URL
4.
Close Chrome completly
5.
Restart of Chrome
6.
Go to any 1Password-saved URL
7.
Open 1Password-extension in Chrome and you´ll see that all URL´s are visible
without entering the Password again while "Keep extensions unlock if Browsers are closed" is unchecked
Flag
0
Comments
-
Welcome to the forum, gummi!
What's the current setting of the [b]Hide my Logins when 1Password is locked[/b] option on the Logins tab of 1Password preferences? If it's disabled, try enabling it, and let us know if that gives you the behavior you'd prefer.
(Note that [i]showing[/i] you the Logins doesn't allow you to [i]use[/i] them without your providing the master password.)Flag 0 -
[quote name='gummi' timestamp='1323904733' post='55519']
re-open Chrome and you'll see that all URL´s are visible without entering the Password again
[/quote]
This is the designed behavior because in our new extension architecture (currently running inside Safari and Chrome), "universal unlock" is turned on. You can turn this feature off here:
1. click the 1P button in Safari or Chrome
2. click the gear icon in the lower-left corner
3. click on the "security" button
4. un-check "enable universal unlock"
[quote name='gummi' timestamp='1323904733' post='55519']
while "Keep extensions unlocked if Browsers are closed" is unchecked
[/quote]
You're right - this feature is IE and Firefox-only. I'm going to update our UI and correct this.Flag 0 -
David,
[quote name='DBrown' timestamp='1323912319' post='55523']
What's the current setting of the [b]Hide my Logins when 1Password is locked[/b] option on the Logins tab of 1Password preferences?
[/quote]
I'm afraid this setting has no influence on our new extension architecture (currently running in Safari and Chrome). Starting with 1.0.9.245, this setting now reads: "Internet Explorer and Firefox only"Flag 0 -
[quote name='Stefan von Dutch' timestamp='1323940901' post='55534']
...[the [b]Hide my Logins when 1Password is locked[/b] option] has no influence on our new extension architecture (currently running in Safari and Chrome). Starting with 1.0.9.245, this setting now reads: "Internet Explorer and Firefox only"
[/quote]
Good to know! I'm having trouble keeping up with the changes.
Thanks, Stefan.Flag 0
