4 ms·

I'm a user of 1Password and a huge fan of the service but I'd really like to have a device sponsor another device automatically (like how iCloud does it) instea

I'm a user of 1Password and a huge fan of the service but I'd really like to have a device sponsor another device automatically (like how iCloud does it) instead of having to present the secret key to the user to manually input into the new client.

John23832 4y ago
The secret key is what keeps your account safe in case of compromise though? Security is always at odds with convenience. - Steve Gibson
- DavideNL 4y ago
  "Your Secret Key and your 1Password account password both protect your data. They’re combined to create the full encryption key that encrypts everything you store in 1Password." https://support.1password.com/secret-key-security/ https://support.1password.com/secret-key-security/
  - John23832 4y ago
    Right. That reaffirms what I said.
dteare 4y ago
I agree providing the Secret Key to other devices can be a pain. In fact it's our #1 onboarding challenge. On Apple devices specifically it's much easier as we can store it in iCloud Keychain, but we'd like to make it simpler everywhere. Curious if you've had a chance to try the Setup Code? It's not as slick as iCloud since we don't own the OS, but it enables you to scan the code and get all the account details on your new device. That way all you need to do is type your password. On that note we recently had a hackathon around this to make things even simpler and we had some success there. I'm hoping we can make this real and share it in an update later this year.
YPPH 4y ago
I will reach for my secret key perhaps once or twice per year when I buy a new device. That being so, it's really no biggie to type in. The obvious benefit of a secret key is its high entropy. But I also like how the secret key discourages me from logging into 1Password on anything but my own, trusted, devices. In my view, password managers should not be accessed from other people's computers or internet kiosks.

John23832 4y ago

The secret key is what keeps your account safe in case of compromise though? Security is always at odds with convenience. - Steve Gibson

DavideNL 4y ago
"Your Secret Key and your 1Password account password both protect your data. They’re combined to create the full encryption key that encrypts everything you store in 1Password." https://support.1password.com/secret-key-security/ https://support.1password.com/secret-key-security/
- John23832 4y ago
  Right. That reaffirms what I said.

dteare 4y ago

I agree providing the Secret Key to other devices can be a pain. In fact it's our #1 onboarding challenge. On Apple devices specifically it's much easier as we can store it in iCloud Keychain, but we'd like to make it simpler everywhere. Curious if you've had a chance to try the Setup Code? It's not as slick as iCloud since we don't own the OS, but it enables you to scan the code and get all the account details on your new device. That way all you need to do is type your password. On that note we recently had a hackathon around this to make things even simpler and we had some success there. I'm hoping we can make this real and share it in an update later this year.

YPPH 4y ago

I will reach for my secret key perhaps once or twice per year when I buy a new device. That being so, it's really no biggie to type in. The obvious benefit of a secret key is its high entropy. But I also like how the secret key discourages me from logging into 1Password on anything but my own, trusted, devices. In my view, password managers should not be accessed from other people's computers or internet kiosks.