AutoSpill information

Hello folks,

With the release of 1Password for Android 8.10.30, you’ll now be warned before you autofill if 1Password can’t verify the app or domain. Although 1Password’s autofill already required explicit user action, this fix enhances 1Password’s security measures by ensuring that only the fields in the appropriate Android WebView are autofilled, preventing unintended credential entry into native app fields.

If you haven’t updated yet then follow the steps in our guide: How to keep 1Password up to date

Thank you all for your patience while our team worked to develop and release an effective and secure response to the “AutoSpill” issue. As a reminder, the issue could only be exploited under certain very limited conditions and the latest version of 1Password for Android mitigates those scenarios.

-Dave