4 ms·

How is the web interface handled? Essentially, where do you turn this on and off? Wouldn't it become standard ptotocol to just demand web credentials for 1Passw

How is the web interface handled? Essentially, where do you turn this on and off? Wouldn't it become standard ptotocol to just demand web credentials for 1Password? This feature is only for subscription based 1Password accounts, so it would seem to me it would just be easiest to delete the app and re-download after crossing?

crooked-v 9y ago
Demanding web logins rather than local logins for anything is a step beyond the fuzzy legal authority currently given to the TSA.
- DanBC 9y ago
  They already ask for social media account logins.
- sbov 9y ago
  If you're a resident, they eventually have to let you in. But if you aren't, they can reject you for any reason. This isn't something you can solve with tech. Those of us who are citizens of the US need to vote for politicians who make privacy a priority, and be more politically active in general. I feel like you could even make the play that it's bad for business, because it's impeding business travel. You could even point to this very post as evidence that many companies consider it a Big Deal - the idea that they have to explicitly hide their company secrets in this way because border agents are out of control.
- Spoom 9y ago
  Not CBP though, which is the relevant institution for international border crossings.
- spathi_fwiffo 9y ago
  web login is likely the same as app login credentials. I don't use 1password, but that's the generate case with LastPass (at least last time i used its mobile app). So, if they take the actual password, as opposed to having you log in for them, then they can easily go to 1password's web interface. I'm not sure if there is a legal barrier to taking that step, but there is no real barrier there if the credentials are the same. Perhaps if there were also travel credentials, that would be useful. With the travel creds there would be no indication that you were in travel mode and no access to additional data.
  - halostatue 9y ago
    There is an additional key/identifier that you don’t have to carry with you that would prevent them from logging in even if you had to give them your vault password.

crooked-v 9y ago

Demanding web logins rather than local logins for anything is a step beyond the fuzzy legal authority currently given to the TSA.

DanBC 9y ago
They already ask for social media account logins.
sbov 9y ago
If you're a resident, they eventually have to let you in. But if you aren't, they can reject you for any reason. This isn't something you can solve with tech. Those of us who are citizens of the US need to vote for politicians who make privacy a priority, and be more politically active in general. I feel like you could even make the play that it's bad for business, because it's impeding business travel. You could even point to this very post as evidence that many companies consider it a Big Deal - the idea that they have to explicitly hide their company secrets in this way because border agents are out of control.
Spoom 9y ago
Not CBP though, which is the relevant institution for international border crossings.
spathi_fwiffo 9y ago
web login is likely the same as app login credentials. I don't use 1password, but that's the generate case with LastPass (at least last time i used its mobile app). So, if they take the actual password, as opposed to having you log in for them, then they can easily go to 1password's web interface. I'm not sure if there is a legal barrier to taking that step, but there is no real barrier there if the credentials are the same. Perhaps if there were also travel credentials, that would be useful. With the travel creds there would be no indication that you were in travel mode and no access to additional data.
- halostatue 9y ago
  There is an additional key/identifier that you don’t have to carry with you that would prevent them from logging in even if you had to give them your vault password.