With the update, 1Password beta testers are now able to use Touch ID to unlock the app's main password, which then allows the app to supply passwords directly to Safari using extensions. The entire process has been demoed in a two Vine videos from Gabriel Nevado (via MacGeneration), who accesses his 1Password content using Touch ID and is then able to enter a password from the app directly in Safari using the Share sheet.
Accessing 1Password on an iOS device with iOS 7 requires users to enter a master password each time the app is opened, and while the app has a built-in browser, it is not possible for the app to input passwords in Safari automatically. With iOS 8's new APIs, apps like 1Password are able to provide a much simpler user experience.
Earlier this month, MacStories shared an in-depth look at app extensions, which allow third-party apps to share services with other apps. The feature also lets developers create widgets for the Notification Center and it allows for custom system-wide keyboards for the first time. Touch ID integration for third-party developers is also one of the 4,000 new APIs Apple introduced with iOS 8.
The iOS 8 1Password update is only available to beta testers at the current point in time, but will likely be released to the public following the official launch of iOS 8, which is expected this fall.
Yes, looks amazing. I can't wait for the 1Password update -- not having to enter a master password every time I use the app will be awesome. Entering passwords directly in Safari is pretty useful too.
The minute I saw the extensions and TouchID stuff from the WWDC keynote, I've been waiting for this.
Cannot wait!
We cannot wait either :) Glad you all are enjoying this. Stay tuned as this is just the first iteration of it all and things will undoubtedly change and improve before release.
1password is the king.
Hail to the king, baby!
This could get me to use 1Password or LastPass.
I assume you're using Cloud Keychain then? Just curious, you should certainly be using some form of password management. We just encourage all users to use some form of password management, even if it isn't our own.
Excellent, definitely a huge step in the right direction.
Unless I'm missing something, nothing got entered into that login form...
The video is cut short. It definitely fills :)
I assume in this case the user who posted this video (it wasn't us) probably didn't want their email to be visible in a video to the public.
My fingers are ready.
Finger exercises commence! Just pace yourself, no need to strain a muscle early in the beta cycle. :)
This will be amazing, but a little disconcerted by the statement that the device's passcode can also be used to unlock 1password. I would rather have that disabled and have my master password as backup. Don't know if that is possible.
I love 1password use it all the time. However, I question how the encryption works on the backend. The current database is encrypted with your password. How does it work now ? Is my plain text password being encrypted and then the TouchKitID token is used to decrypt that in a chain ?
I hope they release some tech specs on it or I won't consider using that feature.
Touch ID or the device passcode can be optionally used as a convenient way to unlock 1Password, very similar to how the PIN code is used in the current version.
Keep in mind that Apple does not allow developers access to the actual finger print. It can only confirm that the finger print matches or not. To set this process up we do store the user's master password in the iOS keychain. It has two restrictions on it that truly matter. The first is that it stays only on the device and will never be synced to other devices. This data is also only accessible by 1Password, no other applications can see or access this data. That's the big one, the second is that it requires the user to validate either via the passcode or Touch ID to gain access.
It's important to remember that we can't derive the master password from the finger print, we're never given access to the finger print data and only receive a "yes/no" type of response from Apple's frameworks.
As I said, it's completely optional and you can choose to use it or not based on your security requirements. I'm sure our security expert will write up more on this prior to release as things are subject to change.
To answer the question of the device passcode, we can do this because when the master password is stored, it can also be accessed when the device passcode is provided. Again, this is limited strictly to the app that stored it.
I love you 1Password. I mean it. Will you be mine?
We <3 you as well :)
Yeah... I think that video was too short... damn 6 second time limit on Vine.
They should have used Instagram to make a 15 second video.
:)
Yup, pretty sure it was just cut short due to time, or the user wanted some privacy. Of course, the user who posted this could've just used fake credentials.
Sweet, now apply this to user-installed apps :D
Derp, nvm, Touch ID to sign in :p
:) Hopefully we can go a few steps further here.
The PIN code is currently optional in 1Password for iOS 7. I assume that this will remain so. They wouldn’t create such a weakness for those devices that don’t have Touch ID, I’m sure.
Upvote!
It's nice of them to recognize Canada Day like that. All too often, news posted online is so US-centric. :)
AgileBits is actually a Canadian company. While we're primarily a remote company we do have a pretty big presence in Canada, and an office in downtown Toronto. I'm from the US, so, looking forward to fireworks on Friday, but our Canadian contingent is definitely going to have their fun as well.
If you're Canadian, enjoy Canada Day!
Can it preselect the right 1password entry (username/password combo) for you based on url or is that part still manual? Looks much better user experience anyway.
Right now it does require interaction from the user. I'm not sure whether we can take that extra step if there is only a single matching item or not, it may be a limitation of the extension system at the moment.
I wonder how one gets involved in the beta? Would love to test it. iOS 8 developer here, and I bought iOS 1Password because it's brilliant. :)
Edit: Signup link was removed due to immense demand. We're full up, sorry folks.
We may not be able to accept everyone but it's worth signing up if you're willing to test. We would certainly love to hear feedback and receive any bug reports for those having trouble.
Is Apple not going to make this a part of the keychain anyway? Touch ID is starting to look awesome.
I assume at this point that if the device is unlocked then iCloud Keychain is unlocked as well. Beyond that I have no clue what they might do. But, we agree, TouchID is starting to look awesome :)
Holy cow this will be amazing!!
I come from the future, and I can tell you, the future is amazing :)
Yes, looks amazing. I can't wait for the 1Password update -- not having to enter a master password every time I use the app will be awesome. Entering passwords directly in Safari is pretty useful too.
Thursday March 28, 2024 11:07 am PDT by Juli Clover
Apple will introduce new iPad Pro and iPad Air models in early May, according to Bloomberg's Mark Gurman. Gurman previously suggested the new iPads would come out in March, and then April, but the timeline has been pushed back once again. Subscribe to the MacRumors YouTube channel for more videos. Apple is working on updates to both the iPad Pro and iPad Air models. The iPad Pro models will...
In November, Apple announced that the iPhone would support the cross-platform messaging standard RCS (Rich Communication Services) in the Messages app starting "later" in 2024, and Google has now revealed a more narrow timeframe. In a since-deleted section of the revamped Google Messages web page, spotted by 9to5Google, Google said that Apple would be adopting RCS on the iPhone in the "fall...
Thieves in Montreal, Canada have been using Apple's AirTags to facilitate vehicle theft, according to a report from Vermont news sites WCAX and NBC5 (via 9to5Mac). Police officers in Burlington, Vermont have issued a warning about AirTags for drivers who recently visited Canada. Two Burlington residents found Apple AirTags in their vehicles after returning from trips to Montreal, and these...
Apple's WWDC 2024 dates have been announced, giving us timing for the unveiling of the company's next round of major operating system updates and likely some other announcements. This week also saw some disappointing news on the iPad front, with update timing for the iPad Pro and iPad Air pushed back from previous rumors. We did hear some new tidbits about what might be coming in iOS 18 and...
Photos of the first iPhone 16 cases have been shared online, offering another preview of the rumored new vertical rear camera arrangement on the standard iPhone 16 and iPhone 16 Plus. Image credit: Accessory leaker Sonny Dickson Over the last few months, Apple has been experimenting with different camera bump designs for the standard iPhone 16 models, all of which have featured a vertical ...
A $3 third-party app can now record spatial video on iPhone 15 Pro models in a higher resolution than Apple's very own Camera app. Thanks to an update first spotted by UploadVR, Spatialify can now record spatial videos with HDR in 1080p at 60fps or in 4K at 30fps. In comparison, Apple's native Camera app is limited to recording spatial video in 1080p at 30fps. Shortly after Apple's Vision ...
Top Rated Comments
Hail to the king, baby!
I assume you're using Cloud Keychain then? Just curious, you should certainly be using some form of password management. We just encourage all users to use some form of password management, even if it isn't our own.
The video is cut short. It definitely fills :)
I assume in this case the user who posted this video (it wasn't us) probably didn't want their email to be visible in a video to the public.
Finger exercises commence! Just pace yourself, no need to strain a muscle early in the beta cycle. :)
Touch ID or the device passcode can be optionally used as a convenient way to unlock 1Password, very similar to how the PIN code is used in the current version.
Keep in mind that Apple does not allow developers access to the actual finger print. It can only confirm that the finger print matches or not. To set this process up we do store the user's master password in the iOS keychain. It has two restrictions on it that truly matter. The first is that it stays only on the device and will never be synced to other devices. This data is also only accessible by 1Password, no other applications can see or access this data. That's the big one, the second is that it requires the user to validate either via the passcode or Touch ID to gain access.
It's important to remember that we can't derive the master password from the finger print, we're never given access to the finger print data and only receive a "yes/no" type of response from Apple's frameworks.
As I said, it's completely optional and you can choose to use it or not based on your security requirements. I'm sure our security expert will write up more on this prior to release as things are subject to change.
To answer the question of the device passcode, we can do this because when the master password is stored, it can also be accessed when the device passcode is provided. Again, this is limited strictly to the app that stored it.
We <3 you as well :)
Yup, pretty sure it was just cut short due to time, or the user wanted some privacy. Of course, the user who posted this could've just used fake credentials.
:) Hopefully we can go a few steps further here.
Upvote!
AgileBits is actually a Canadian company. While we're primarily a remote company we do have a pretty big presence in Canada, and an office in downtown Toronto. I'm from the US, so, looking forward to fireworks on Friday, but our Canadian contingent is definitely going to have their fun as well.
If you're Canadian, enjoy Canada Day!
Right now it does require interaction from the user. I'm not sure whether we can take that extra step if there is only a single matching item or not, it may be a limitation of the extension system at the moment.
Edit: Signup link was removed due to immense demand. We're full up, sorry folks.
We may not be able to accept everyone but it's worth signing up if you're willing to test. We would certainly love to hear feedback and receive any bug reports for those having trouble.
I assume at this point that if the device is unlocked then iCloud Keychain is unlocked as well. Beyond that I have no clue what they might do. But, we agree, TouchID is starting to look awesome :)
I come from the future, and I can tell you, the future is amazing :)
Cannot wait!
PS: For anyone that's jailbroken on iOS 7.1.2, iTouchSecure in Cydia has third party Touch ID access. I'm using that to hold me over until the fall.
Yes, looks amazing. I can't wait for the 1Password update -- not having to enter a master password every time I use the app will be awesome. Entering passwords directly in Safari is pretty useful too.