Feature Idea - Intercept Email Codes / Magic Links

@cristianduguet

Thank you for the reply. At the moment, 1Password's design means that it has no insight or awareness into what kind of information you're storing in your vault. If you have your login information for Google saved in 1Password then, because everything is end-to-end encrypted, 1Password doesn't even know that you have an account with Google or that you're storing your account credentials for Google in 1Password.

The idea for an email proxy service is interesting but it doesn't answer all of the privacy and security concerns. Since regular email isn't end-to-end encrypted, the design of 1Password would suddenly change since 1Password would be able to see the unencrypted headers and email body content. And since emails from services also contain other data such as usernames and personally identifiable information 1Password would be able to see that as well. Now, you might say that you trust 1Password not to abuse this data but the lack of end-to-end encryption for such a theoretical feature would also make it more vulnerable to breaches and interception since it wouldn't be protected by our end-to-end encryption and Secret Key architecture.

Running an email service is a large undertaking and tricky to do well. It's one of the reasons why we partnered with Fastmail, who do an amazing job and have decades of experience with email, for masked email addresses: Masked Email

All that being said, magic links and email 2FA can be frustrating and I've passed along your feedback to the product team. They'll investigate if there's a way that we can help make things better while keeping your data private and secure. 🙂

-Dave

ref: PB-30521191