Forum Discussion

1P_Timothy's avatar
1P_Timothy
Icon for Community Manager rankCommunity Manager
3 months ago

Hi jcrAggie​, thanks for writing in! I really appreciate your thoughtful discourse here.

Anecdotally I remember auto-submit being a frequently requested feature before it's introduction, and something I still see positive feedback on. While I can't speak to the product conversation that took place around auto-submit, setting something on or off by default would not be a decision made without cause. 

I hope that doesn't come off as dismissive as that's certainly not my intent. The reason features like this exist, and why you continue to see iterations and enhancements to 1Password is thanks to input like yours. For your use case I can definitely understand the benefit of having auto-submit off by default. I can't say this is something that will be changed, but I've shared your feedback with the team.

Having an auto-submit option appear on setup, or first launch as you and AJCxZ0​  described is an interesting an idea. That's an area where we also aim to strike a fine balance between helpful for new users, and causing minimal friction for frequent users. Adding extra steps or toggles can tip the balance one way or another, but I can see this being more on the helpful side. I've included feedback on this for the team as well.

Thanks again for your input on this! 

49410275

 

  • jcrAggie's avatar
    jcrAggie
    New Contributor
    3 months ago

    Thank you for the reply!

    I absolutely think that auto-submit was more beneficial back when first introduced. There is no question about it. However, I feel the login landscape has dramatically changed in the past few years, between various 2FA/MFA schemes, notifications at pre-login as others have indicated and other types of login schemes being introduced these days. I just feel that too quickly logging into sites automatically without that being a user decision up front could create more confusion and even animosity towards PW managers in general. And we certainly don't need that in this day and age. I know I'm happy when I can get family/friends/co-workers using ANY PW manager (of course I prefer 1PW). 

    Again, I really appreciate you and others taking the time for your input and thoughts. This is what makes the 1PW community work and thrive!

    • BobW's avatar
      BobW
      Dedicated Contributor
      3 months ago

      OP: You've hit on my biggest pet peeve with 1P. We might be in the minority on this, but I'm also in the minority of people who always locks my front door despite my neighborhood "feeling safe".

      I absolutely think that auto-submit was more beneficial back when first introduced. There is no question about it.

      I can't agree with that at all. It's always been a dangerous, counterproductive feature. It's one of those things that sounds good on a product team's whiteboard, but when you start using it in the real world, there are way too many problems with it. I will agree, though, that recent landscape changes have made the feature even worse. But it was never good.

      The one case I can think of where it legitimately is safe, predictable, and a significant time-saver is when you're logging into the same handful of sites repeatedly throughout your day, but not others. Like what some employees might do at work. For these cases, having the option is great. But for general use? This has been discussed in the forums several times, but here are a couple of more informative threads:

      https://www.1password.community/discussions/1password/how-to-disable-auto-signin-feature/108694?topicRepliesSort=postTimeAsc

      https://www.1password.community/discussions/1password/how-do-i-disable-form-autosubmit/89123?topicRepliesSort=postTimeAsc

      That second one is particularly long with lots of examples of problems, to include some serious security issues — like one I posted about accidentally leaking credentials across sites.

      It's also simply unreliable, often breaking sites' login processes, as attested to with repeated entries about one-off site fixes in 1P's historical release notes. (I know they have to no choice but to do one-off fixes for auto-filling situations, but there are lots of other bugs and features I'd prefer they spend time on than doing constant auto-submit fixes.) On top of that is the class of problems OP alludes to, such as agreeing to something you didn't want to ("Yes! Put me on your spam list!"), or not getting a "keep me logged in" box ticked when you'd like to.

      • 1P_Dave's avatar
        1P_Dave
        Icon for Moderator rankModerator
        3 months ago

        BobW​ 

        Thank you for the feedback, I've shared it with the team. Currently, as things work today, there are two ways to turn off auto-submit for 1Password in the browser: 

        1. Turn off auto-submit for all websites (you'll need to do this for each browser/profile where you use 1Password):
          1. Right-click on the 1Password icon in your browser's toolbar and click Settings. 
          2. Click Autofill & save.
          3. Turn off "Sign in automatically after autofill". 
        2. Turn off auto-submit for individual websites (this syncs across all browsers/profiles where you use 1Password):
          1. Click the 1Password icon in your browser toolbar. 
          2. Find and select the Login item in question.
          3. Click on the three dots in the upper right corner of the item and then click Don't sign in automatically. 


        I hope that helps. 

        -Dave

        PB-49649229