Forum Discussion

dragon1's avatar
dragon1
Dedicated Contributor
3 years ago

Browser AddOn bypassing 2FA and/or Yubikey protection of 1PW Account-Management website. Why?

Hi, when using your browser addons (all browsers do have the same behavior) I can click within settings at accounts & vaults or integrations and it redirects me to my 1Password account-website 'wi...
browser extension
dragon1's avatar
dragon1
Dedicated Contributor
3 years ago

Hi Blake,

thanks for your detailed feedback. Got it...

But wouldn't it make sense to protect the account-management website? It does not need to be that open.
Those who do access account settings maybe want to have another point of security - because it's the account-management website where you can add/delete security-keys, team members and so on.

In general it would feel more safe, to have an additional layer of security over there.

I understand what you mean - but my point is, that sometimes I do feel more safe, when not everything possible will be made possible.

Hope you got what I mean as I'm not a native speaker - sorry for that.