1Password at work

When I click on the extension icon in the toolbar, it takes several seconds, and sometimes even minutes, for the extension panel to open. See here small clip where the panel takes 30 seconds to open: https://drive.google.com/file/d/1H7opDLsXEolSc5YNzUdBeYB-tLDLSE_W/view?usp=sharingThe delay is inconsistent: Sometimes the panel opens after about 10 seconds, other times it takes 30 seconds, and occasionally it can take more than a minute!I tried switching to a different Chrome profile and reinstalling Chrome. I also tested Chrome Beta channel, and the issue occurs there as well. It works fine on Firefox, Arc and Zen browsers. This only happens in Google Chrome. I'm using Mac OS. 

It would be nice to have a private section within an item record when sharing it with others.Currently, I share passwords via vaults within my company. For each server, I need to create two separate records:A private record — containing my own personal password, which is not meant to be seen by others.A shared record — containing credentials for other admins, such as service account passwords, keys, and database passwords.In my opinion, having to create two records for the same server is not ideal. It adds unnecessary overhead and makes things harder to manage.

Hi there,I am using https://play.google.com/store/apps/details?id=net.quetta.browser, which is also a Chromium browser. Autofill function works well, but passkeys are failed. "For security reasons, 1Password can not use this passkey. The associated URL for this passkey does not match the selected app".Version info:Quetta: 1.8.5(2815)1passwd: 8.12.8-23.BETA(81208023) 

Hello,We are evaluating 1Password Business for a large enterprise deployment and have a question regarding employees who may already be using personal 1Password accounts with their corporate email addresses.For example:An employee independently signs up for a personal 1Password account using their corporate email address (user@company.com)The company later deploys 1Password Business with SSO and SCIM provisioningOur primary concern is understanding what happens to the employee's personal account in this situation.Specifically:Can the employee keep their personal account?Can the employee change the email address on the personal account (for example, from user@company.com to a personal Gmail address) and continue using it independently?What happens when the same corporate email address is invited to a Business account?What happens if SCIM provisioning creates the same user?Does SSO enforcement affect the existing personal account?Are any personal vaults, items, or data automatically tran

Hello everyone,We are evaluating 1Password Business for a large enterprise deployment and would like to better understand recommended approaches for delegated administration and permission management.Our goal is to allow departments to manage their own credentials and membership without requiring central IT involvement for every change.Example:Finance System VaultFinance Manager Group = Full controlFinance Lead Group = Edit permissionsFinance Staff Group = Edit permissionsFinance Assistant Group = View-only permissionsQuestions:Is this a recommended design pattern in 1Password Business?Can department managers be delegated authority to manage group membership without granting broader administrative permissions?How do large organizations typically handle role-based access such as:Department ManagerTeam LeadStaffAssistantIf Microsoft Entra ID or Okta is used with SCIM, do most organizations manage these role memberships in the IdP and synchronize them to 1Password?Can permissions be diffe

I have a paid 1Password subscription on another computer other than this forum account.I have a feature request to fix a 1Password user-experience inconsistency:1. The Good Part first:First, let me introduce how I use 1password.  Sometimes I enter the master password, but I also have let it use my biometric (Touch ID).  Compare the bottom-right corner of these two screenshots:When using with MacBook open, Touch ID logo button shows:When using with MacBook closed (External Monitor), Touch ID logo button disappears:If I open/close MacBook, the bottom-right-corner button changes correctly when I open/close/open/close MacBook.  Good, you did it properly in use case #1. This is great, because I can often open MacBook, do the TouchID thing, and close MacBook.  I can even initiate by external keyboard (<TAB><TAB><ENTER> to select the TouchID dialog-button, before reaching my thumb over).  This is without needing to use a mouse or touchscreen, if

We're excited to share that 1Password Credential Broker is now in private beta! Credential Broker helps teams give CI/CD pipelines, machine workloads, and eventually AI agents access to the credentials they need, only when they need them. Instead of storing long-lived tokens in config files, environment variables, or pipelines, workloads can prove their identity at runtime, get the specific credential they’re approved to use, and lose that access when the job is done. The private beta starts with GitHub Actions. When a workflow runs, GitHub issues a signed identity token that confirms which repo, branch, and workflow is executing. 1Password Credential Broker checks that identity against a policy configured in 1Password, then delivers only the approved vault item for that job. That means teams can: Avoid storing long-lived service account tokens in pipelines Scope machine workload access to specific vault items Remove standing vault access from CI/CD jobs See audit events with att

I requested support about sharing vault items with my managed companies.  Support advised me it is not possible.  I would like to suggest it as a new enhancement to the MSP product.As an MSP, I have vault for each of my clients with all of their technical information.Many items in my MSP client vaults have passwords the client end users need day-to-day (WiFi, Printer Access, Door Codes, etc.).I would like to have the ability to SHARE specific Items in my MSP Vaults with specific users in my Managed Companies (or at least to a "shared Vault" in the Managed Company so the users can have access).This would eliminated the burdensome and error-prone process of updating 2 complete separate company vaults - and eliminate the high probability the overlapping data will be not maintained properly.  Manual duplication/sync is never a good idea.Specific items would have to have the ability to share (without expiration) to the client end user to specific end users in my "Managed

Hey all,We've been using 1Password Business for a while now and generally love it, but we're running into a real pain point with how vaults work when you need to share credentials across different groups.Some context on our setup - we're a boutique digital agency, so we deal with:Internal team members (some stuff shared with everyone, some only within departments)Contractors who should only see specific items they needClients whom we invite as guests to collaborate on their project credentialsThe problem is that 1Password doesn't let you share a single item across multiple vaults. So if a hosting login needs to be accessible to the internal dev team, a contractor working on that project, AND the client - we end up duplicating that item into 3 separate vaults. Now multiply that across a bunch of clients and credentials and it gets messy fast.The worst part is when someone logs in and gets prompted to change a password. They update it in their vault, but the copies in the

1 Password for EnterpriseSSO Method EntraHosted SCIMManaged GroupWhen I add a new user to a group to automatically onboard them now, when the user gets to the email verification step, that user gets "An Unknown Error Occurred" "Contact your account administrator for help.".  below that in the response is "Error(SecureChannelCreateSession(Fetch)) \r\n at /builds/dev/cc/confidential-computing/crates/internal/cc-secure-channel-client/src/lib.rs:445"This did not happen with the first user to onboard through this group, but it has happened with all others. After 48 hours I was able to re-invite one of the users and push them through, but I want to know how to avoid this in the future. 

Now that the interface to edit/set keyboard shortcuts has been removed from 1Password running under Wayland, It would be preferable if the installation package made the shortcuts available to configure by default, rather than https://support.1password.com/keyboard-shortcuts/?linux#wayland. I wrote about this before under a blog of post yours, but it was ignored.It's trivial to add Desktop Action sections to your existing launcher file, and reference them in an Actions= directive:[Desktop Entry] Name=1Password Exec=/opt/1Password/1password %U Terminal=false Type=Application Icon=1password StartupWMClass=1Password Comment=Password manager and secure wallet MimeType=x-scheme-handler/onepassword;x-scheme-handler/onepassword8; Categories=Office; Actions=Show;QuickAccess;Lock;Fill; [Desktop Action Show] Name=Show 1Password Icon=window-symbolic Exec=1password --show [Desktop Action QuickAccess] Name=Show Quick Access Icon=search-symbolic Exec=1password --quick-access [Desktop Action Lock]

I still cannot figure out how 1Password determines which login to show in the login fields.I have quite a number of similar websites I need to login to which all have a little distinction. When I want to login to a site I see a number of possible logins, but often the’re not close to what should represent the actual login.

I'm using the date field (new) and the alert expiration. But there is no view or report to list by this fields. and no pop up or something to have visibility of alerts. That means I have to go one by one entry to see that field. My question is if there is a expiration or alert report and how to access this?

Why does 1Password ask me to save or update a login when it just filled in that login?

I understand the Employee vault is private by design. However, when onboarding new employees it would be extremely convenient for a 1Password admin to create entries in the new employee's private vault.  This would be used to provide initial login/password information for the employee's various accounts.  Being able to create such entries would make the process much simpler and eliminate the need to use other out-of-band methods to communicate login info securely.

Hi All,We are sharing 1Password items using department vaults, together with a lot of different colleagues in our corporate environment. We would like to see who has added (or modified) a specific record. Currently, the Added on and Last edited date are shown, but this does not reveal the user that has performed this action. Preferred feature in red below: This would help a lot tracing the items owners in our corporate vaults, thanks! 

I opened a support case for this and was told to disable auto sign in to fix this, but that is kind of a "make everything sub-optimal to fix one issue" sort of thing.The site sync.com recently "improved" their website, in that they now have a deep captcha check that takes several seconds to complete, however they put it on both their main login page and their MFA page.  So I can wait for the captcha to come ready, check it, then use 1Password to fill my user name and password. On the next page it asks for the MFA code, the browser extension properly recognizes it, fills in the MFA code and tries to sign in, but there's another captcha on that page which doesn't get completed so, in another great "improvement" kicks me completely out of the login flow back to the inital page with a "blocked by CloudFlare" error.The only way to use 1Password with sync.com right now is to either drag and drop the credentials in and not use autofill at all or disable auto sign in globally to allow thi

Please update the release notes. Thanks!

We've purchased 1password business to help employees manage internal passwords. Many of these systems are on the same *.company.com domain. 1Password keeps linking these different systems into the same record.Creating records and then manually changing the "Only fill on this exact host" option is extremely clunky. How can we:Set a default option for all our users for 1Password to always match on exact host?orMake 1Password treat our internal domains (e.g. company.com, company.local) as top level domains - ideally this would be a policy we can configure?

I posted this at 1Password at home, but I actually think this would be well suited for at home users or at work.  So I post here as well - -Currently, storing both a password and its corresponding Multi-Factor Authentication (MFA/TOTP) seed within the same 1Password item creates a "single point of failure." If a device or 1Password session is left unlocked, an unauthorized user gains immediate access to both factors.I am requesting a feature that allows administrators (or individual users) to require a secondary validation (such as re-entering the Master Password, using Biometrics, or confirming a 1Password-level MFA prompt) before 1Password will reveal or autofill specific TOTP codes.The ProblemWhile storing MFA codes in 1Password is incredibly convenient, it inherently violates the core principle of MFA (combining something you know with something you have). If an attacker gains access to the 1Password vault, the security benefit of MFA is effectively neutralized for that accoun

As a longtime user of both 1Password and FileMaker Pro I still wonder if it isn’t possible to somehow use 1Password to automatically fill username/password when I open up a FileMaker database.Since I’m not just a user but a developer I need to open up different databases a lot every day. And although I store my passwords in 1Password there is no way to auto-enter them directly. I still need to copy-paste (that’s the downfall of using a different password for every login) the password from 1Password to FileMaker Pro.

I'm heavily using 1password now for agentic usage. All of my business is set up on it now, and all of my credentials are locally using op://, or service accounts.I've put in a lot of effort to try and isolate systems using least privilege, but one problem is that when agents (or applications) request a credential from the system, it doesn't say WHAT credential is being requested.Half the time it doesn't even say the correct name for the application making the request, either. This is a big problem, because I'm starting to get into the habit of just spamming "Accept" blindly. But the whole reason I have set up this whole pipeline is so I can catch malicious programs trying to gain access - for example, supply chain attack infections.Without seeing what credential is being requested, and the process information that is requesting it, I'm finding it's not actually adding much protection at all, because it's putting me into a false sense of security and promoting bad habits. If I'm ru

Is there any information on whether and when this feature will be brought back? In a 1Password setup with a 5-digit number of logins and, consequently, a lot of tags, navigation is simply a real hassle...The “type to jump to” feature isn’t currently available because of a recent backend reengineering of the sidebar. I know that feature was really useful to some, so I’ve shared your feedback with the team and a feature request has been filed to explore bringing it back in the future.https://www.1password.community/discussions/1password-work/slowunresponsive-uiux-after-update-to-8-12-10-windows-desktop/169194/replies/169197

Hi,We're using (linux) ssh remotely to connect to an on-prem bastion.  Behind the bastion is a docker container we use for ansible deployment. There are several playbooks that need environment variables exported in order to run.  It would be nice to pull these in on the remote container using op  instead of the current cut/paste workflow.  Is it possible to authorize the terminal locally with op signin and then schmooze that authorization into the remote docker container with ssh -A or something to allow the container to do something like: TOKEN=$(op read "op://Dev Secrets/GitHub Token/password") ?Our 1P accounts are issued through an enterprise and we use SSO for login with our on-prem IDP so there may be some restrictions with methods available (eg: service account token) 

The fields filled, but the page at the FedEx payment rejected almost all the fields and they all had to be re-entered manually.