With the update, 1Password beta testers are now able to use Touch ID to unlock the app's main password, which then allows the app to supply passwords directly to Safari using extensions. The entire process has been demoed in a two Vine videos from Gabriel Nevado (via MacGeneration), who accesses his 1Password content using Touch ID and is then able to enter a password from the app directly in Safari using the Share sheet.
Accessing 1Password on an iOS device with iOS 7 requires users to enter a master password each time the app is opened, and while the app has a built-in browser, it is not possible for the app to input passwords in Safari automatically. With iOS 8's new APIs, apps like 1Password are able to provide a much simpler user experience.
Earlier this month, MacStories shared an in-depth look at app extensions, which allow third-party apps to share services with other apps. The feature also lets developers create widgets for the Notification Center and it allows for custom system-wide keyboards for the first time. Touch ID integration for third-party developers is also one of the 4,000 new APIs Apple introduced with iOS 8.
The iOS 8 1Password update is only available to beta testers at the current point in time, but will likely be released to the public following the official launch of iOS 8, which is expected this fall.
Yes, looks amazing. I can't wait for the 1Password update -- not having to enter a master password every time I use the app will be awesome. Entering passwords directly in Safari is pretty useful too.
The minute I saw the extensions and TouchID stuff from the WWDC keynote, I've been waiting for this.
Cannot wait!
We cannot wait either :) Glad you all are enjoying this. Stay tuned as this is just the first iteration of it all and things will undoubtedly change and improve before release.
1password is the king.
Hail to the king, baby!
This could get me to use 1Password or LastPass.
I assume you're using Cloud Keychain then? Just curious, you should certainly be using some form of password management. We just encourage all users to use some form of password management, even if it isn't our own.
Excellent, definitely a huge step in the right direction.
Unless I'm missing something, nothing got entered into that login form...
The video is cut short. It definitely fills :)
I assume in this case the user who posted this video (it wasn't us) probably didn't want their email to be visible in a video to the public.
My fingers are ready.
Finger exercises commence! Just pace yourself, no need to strain a muscle early in the beta cycle. :)
This will be amazing, but a little disconcerted by the statement that the device's passcode can also be used to unlock 1password. I would rather have that disabled and have my master password as backup. Don't know if that is possible.
I love 1password use it all the time. However, I question how the encryption works on the backend. The current database is encrypted with your password. How does it work now ? Is my plain text password being encrypted and then the TouchKitID token is used to decrypt that in a chain ?
I hope they release some tech specs on it or I won't consider using that feature.
Touch ID or the device passcode can be optionally used as a convenient way to unlock 1Password, very similar to how the PIN code is used in the current version.
Keep in mind that Apple does not allow developers access to the actual finger print. It can only confirm that the finger print matches or not. To set this process up we do store the user's master password in the iOS keychain. It has two restrictions on it that truly matter. The first is that it stays only on the device and will never be synced to other devices. This data is also only accessible by 1Password, no other applications can see or access this data. That's the big one, the second is that it requires the user to validate either via the passcode or Touch ID to gain access.
It's important to remember that we can't derive the master password from the finger print, we're never given access to the finger print data and only receive a "yes/no" type of response from Apple's frameworks.
As I said, it's completely optional and you can choose to use it or not based on your security requirements. I'm sure our security expert will write up more on this prior to release as things are subject to change.
To answer the question of the device passcode, we can do this because when the master password is stored, it can also be accessed when the device passcode is provided. Again, this is limited strictly to the app that stored it.
I love you 1Password. I mean it. Will you be mine?
We <3 you as well :)
Yeah... I think that video was too short... damn 6 second time limit on Vine.
They should have used Instagram to make a 15 second video.
:)
Yup, pretty sure it was just cut short due to time, or the user wanted some privacy. Of course, the user who posted this could've just used fake credentials.
Sweet, now apply this to user-installed apps :D
Derp, nvm, Touch ID to sign in :p
:) Hopefully we can go a few steps further here.
The PIN code is currently optional in 1Password for iOS 7. I assume that this will remain so. They wouldn’t create such a weakness for those devices that don’t have Touch ID, I’m sure.
Upvote!
It's nice of them to recognize Canada Day like that. All too often, news posted online is so US-centric. :)
AgileBits is actually a Canadian company. While we're primarily a remote company we do have a pretty big presence in Canada, and an office in downtown Toronto. I'm from the US, so, looking forward to fireworks on Friday, but our Canadian contingent is definitely going to have their fun as well.
If you're Canadian, enjoy Canada Day!
Can it preselect the right 1password entry (username/password combo) for you based on url or is that part still manual? Looks much better user experience anyway.
Right now it does require interaction from the user. I'm not sure whether we can take that extra step if there is only a single matching item or not, it may be a limitation of the extension system at the moment.
I wonder how one gets involved in the beta? Would love to test it. iOS 8 developer here, and I bought iOS 1Password because it's brilliant. :)
Edit: Signup link was removed due to immense demand. We're full up, sorry folks.
We may not be able to accept everyone but it's worth signing up if you're willing to test. We would certainly love to hear feedback and receive any bug reports for those having trouble.
Is Apple not going to make this a part of the keychain anyway? Touch ID is starting to look awesome.
I assume at this point that if the device is unlocked then iCloud Keychain is unlocked as well. Beyond that I have no clue what they might do. But, we agree, TouchID is starting to look awesome :)
Holy cow this will be amazing!!
I come from the future, and I can tell you, the future is amazing :)
Yes, looks amazing. I can't wait for the 1Password update -- not having to enter a master password every time I use the app will be awesome. Entering passwords directly in Safari is pretty useful too.
Wednesday April 17, 2024 9:58 am PDT by Juli Clover
Game emulator apps have come and gone since Apple announced App Store support for them on April 5, but now popular game emulator Delta from developer Riley Testut is available for download. Testut is known as the developer behind GBA4iOS, an open-source emulator that was available for a brief time more than a decade ago. GBA4iOS led to Delta, an emulator that has been available outside of...
Tuesday April 16, 2024 11:33 am PDT by Joe Rossignol
The first approved Nintendo Entertainment System (NES) emulator for the iPhone and iPad was made available on the App Store today following Apple's rule change. The emulator is called Bimmy, and it was developed by Tom Salvo. On the App Store, Bimmy is described as a tool for testing and playing public domain/"homebrew" games created for the NES, but the app allows you to load ROMs for any...
Tuesday April 16, 2024 6:54 am PDT by Tim Hardwick
Last September, Apple's iPhone 15 Pro models debuted with a new customizable Action button, offering faster access to a handful of functions, as well as the ability to assign Shortcuts. Apple is poised to include the feature on all upcoming iPhone 16 models, so we asked iPhone 15 Pro users what their experience has been with the additional button so far. The Action button replaces the switch ...
Wednesday April 17, 2024 12:19 pm PDT by Juli Clover
A decade ago, developer Riley Testut released the GBA4iOS emulator for iOS, and since it was against the rules at the time, Apple put a stop to downloads. Emulators have been a violation of the App Store rules for years, but that changed on April 5 when Apple suddenly reversed course and said that it was allowing retro game emulators on the App Store. Subscribe to the MacRumors YouTube channel ...
iOS 18 is expected to be the "biggest" update in the iPhone's history. Below, we recap rumored features and changes for the iPhone. iOS 18 is rumored to include new generative AI features for Siri and many apps, and Apple plans to add RCS support to the Messages app for an improved texting experience between iPhones and Android devices. The update is also expected to introduce a more...
Top Rated Comments
Hail to the king, baby!
I assume you're using Cloud Keychain then? Just curious, you should certainly be using some form of password management. We just encourage all users to use some form of password management, even if it isn't our own.
The video is cut short. It definitely fills :)
I assume in this case the user who posted this video (it wasn't us) probably didn't want their email to be visible in a video to the public.
Finger exercises commence! Just pace yourself, no need to strain a muscle early in the beta cycle. :)
Touch ID or the device passcode can be optionally used as a convenient way to unlock 1Password, very similar to how the PIN code is used in the current version.
Keep in mind that Apple does not allow developers access to the actual finger print. It can only confirm that the finger print matches or not. To set this process up we do store the user's master password in the iOS keychain. It has two restrictions on it that truly matter. The first is that it stays only on the device and will never be synced to other devices. This data is also only accessible by 1Password, no other applications can see or access this data. That's the big one, the second is that it requires the user to validate either via the passcode or Touch ID to gain access.
It's important to remember that we can't derive the master password from the finger print, we're never given access to the finger print data and only receive a "yes/no" type of response from Apple's frameworks.
As I said, it's completely optional and you can choose to use it or not based on your security requirements. I'm sure our security expert will write up more on this prior to release as things are subject to change.
To answer the question of the device passcode, we can do this because when the master password is stored, it can also be accessed when the device passcode is provided. Again, this is limited strictly to the app that stored it.
We <3 you as well :)
Yup, pretty sure it was just cut short due to time, or the user wanted some privacy. Of course, the user who posted this could've just used fake credentials.
:) Hopefully we can go a few steps further here.
Upvote!
AgileBits is actually a Canadian company. While we're primarily a remote company we do have a pretty big presence in Canada, and an office in downtown Toronto. I'm from the US, so, looking forward to fireworks on Friday, but our Canadian contingent is definitely going to have their fun as well.
If you're Canadian, enjoy Canada Day!
Right now it does require interaction from the user. I'm not sure whether we can take that extra step if there is only a single matching item or not, it may be a limitation of the extension system at the moment.
Edit: Signup link was removed due to immense demand. We're full up, sorry folks.
We may not be able to accept everyone but it's worth signing up if you're willing to test. We would certainly love to hear feedback and receive any bug reports for those having trouble.
I assume at this point that if the device is unlocked then iCloud Keychain is unlocked as well. Beyond that I have no clue what they might do. But, we agree, TouchID is starting to look awesome :)
I come from the future, and I can tell you, the future is amazing :)
Cannot wait!
PS: For anyone that's jailbroken on iOS 7.1.2, iTouchSecure in Cydia has third party Touch ID access. I'm using that to hold me over until the fall.
Yes, looks amazing. I can't wait for the 1Password update -- not having to enter a master password every time I use the app will be awesome. Entering passwords directly in Safari is pretty useful too.