It’s Cybersecurity Awareness Month! Join our interactive training session, or learn about security and AI from 1Password experts.
Forum Discussion
Auto-Fill Security Concern
Since share sheets is gone forever, I'd like to know more about auto-fill functionality.
Specifically, what prevents a malicious site from harvesting credentials by tricking 1password into auto-fi...
Thank you @jpgoldberg.
I don’t understand how this is safer than share sheets. It would seem equivalent to share sheets because back to the good old days of share sheets, two week ago, I had all of the URLs listed in 1password for each login. In some rare cases, a login would be used on a different top level domain so I’d have both listed.
When I was in safari, on a webpage who’s URL I had saved in 1password, then share sheets would jump 1password to that login. If, I was on a fake webpage that only looked like the correct webpage but the URL was different, then share sheets would pull up the entire 1password, not the specific website, which would be an indication something is wrong.
I’m only this week learning about auto-fill so I don’t understand how it’s safer than sharesheets since my understanding differs from your explanation, in that a website would have to fool both me and 1password to get sharesheets to pull up the specific website.
