A

Anonymous

Solved

Feature request: Hide 1Password on an entire website

Forum|Forum|4 years ago
February 21, 2022
44 replies
8827 views

I'm trying to figure out how to disable 1Password for specific websites. I understand that the first time I visit a url have the option to "Never Ask Again," but I don't know how to manually enable that feature for a website that I visit frequently.

I do want to maintain this site's account credentials in 1Password, including the username, email address, and site url, but I do not want the 1Password browser extension actually displaying on that url. Is there a way to achieve this?

I'm using Firefox.

1Password Version: 1Password 7 Version 7.9.2 (70902004) Mac App Store
Extension Version: Firefox Extension 2.2.3
OS Version: macOS 12.2.1

Browser Extension

Best answer by 1P_Dave

Hello folks!

As mentioned by Evon a year ago here, 1Password can now be permanently hidden on specific URLs in your browser by following these steps:

Right-click on the page in question.
Choose 1Password - Password Manager > Hide on this page.

This will hide 1Password on that specific page (URL) but not the entire website. This preference will persist even if you close or restart your browser. To clear your hidden pages you can right-click on the 1Password icon in your browser's toolbar, click Autofill & save, and then click Reset hidden pages.

That said, the internal feature request to expand this feature so you can hide 1Password across an entire website (not just a single page) is still open with the product team. Please keep the feedback coming, it really helps us understand how we can continue improving 1Password to better fit your needs.

-Dave

Show previous replies

A

aquafarr

+1 here, or +a team of 15 people.

Saving your password for 1Password in 1Password seems like a terrible idea. Please find a way ASAP to block certain websites.

The only close to workaround I've found as an administrator is this:

In a vault that is shared with the entire organization create a log in with these settings:

Login Title: x DO NOT save your log in for this site.
username: Login Blocker (ask IT Admin)
password: x

(Don't put the term "1Password" or "Password" in the Login Title, this keep it from turning up in day to day searches of 1P. The password is literally one character. So that if it ever did get filled it would be obvious that the password is only one character.)

website: https://1password.com
website: https://my.1password.com/

then do the filters for "Never fill on this website" for both.

All this creates a pop up reminder team members to not attempt saving their PW to 1Password. This login is buried in a vault that no one would search out. But 1. admins can't lock editing of a Login so anyone could edit it and 2. I'm not sure how the conflict would work if they attempted to create a new password for this same site from within the app. There would be two instances of the website in the 1Password database, one blocked one not. For that matter a team member could still save their PW in 1Password they just can't fill it on a site.

.... y'all just fix this please.

K

kiwiant

No luck trying this with identities but speaking of hacks has anyone tried adding a JavaScript hack (if they have control over web site code) to remove the 1Password extension elements as they appear? Can't believe we're talking about hacks for a feature that should be present.

K

kiwiant

I've just created a snippet of JavaScript for our sites to block 1Password from showing the menu and buttons and appears to work on version 8.12.2.37 of the extension. The downside is that one needs access to the web site's code to deploy.

const block1Password = () => {
    document.querySelectorAll('com-1password-menu,com-1password-button')
        .forEach(el => el.remove());
};

new MutationObserver(block1Password).observe(document.documentElement, {
    childList: true,
    subtree: true
});

S

stellar292

I'm also looking for a way to stop 1Password from showing autofill suggestions only on specific sites (e.g. RailsAdmin in several different environments). "Hide on this page" is only temporary, I'd like it to be permanent.

T

tygital

+1 here + a team of 3.

Please implement this, as @YvesRausch wrote:
"It is quiet simple: Add in context menu > Don't use 1Password on this site, add to blacklist, all be happy."

M

mathmeetsmusic

Seriously guys, am I going to have to join this company for a single week, implement the feature, and then quit? 4 years for a no brainer feature like this is nuts. Symptom of a wider problem in the company...

1P_Dave

1Password Employee

@aquafarr

Can you clarify why you'd like to avoid having your team members save their account password in 1Password? This is something that is done automatically for accounts with the creation of a "Starter Item" item which is safe and secure. In fact, saving your account password for 1Password in 1Password can help protect your team members from phishing attacks since 1Password in the browser will only fill the account password from the Starter Kit into legitimate pages: How the 1Password Starter Kit Items Keep You Secure

That being said, I've passed everyone's comments and requests for a permanent way to disable 1Password in the browser on certain pages along to the team. Thank you for the feedback.

-Dave

ref: PB-40568557
ref: PB-40568463
ref: PB-40568549
ref: PB-40568569

A

alexhamer

Adding my voice to this request, i use a CRM which we absolutely need 1Pass to remember the login as it is complex and changes regularly, but once we're in we don't want it prompting every time we open a client record, because we can't read the client's address as 1Pass is in the way.

At the moment i get 1pass popping up in every field on the client record on urls like http://www.website.com/clientdata/12345, so i would like to disable it for every path beyond /clientdata/

Currently, i can turn it off using the icon in the data field, change windows to check our accounts system then when i come back, it is enabled again, it's very annoying!

Please help!

TLDR: I want to use 1pass to get in via http://www.website.com/login, but once we're in i want to disable it using a Path rule, and this is not possible as far as i can tell

lumiere

Hi, I'm joining the queue in this thread to complain about the autofill malfunction.
This is an issue that 1Password has been carrying for a long time, and I believe it's time to provide a response to the customers who pay for their subscriptions meticulously but for whom there is still no solution.

In reality, the problem to solve is quite simple. I understand that you want to use the domain name for filtering, but I think you should give users the option to choose the type of filtering:

domain name

or

text string or url "call it whatever you want, in the end, it's just a simple string of text"

The autofill, if it finds the autofill set to a text string or url value, will perform a simple comparison.
Does the page contain this URL? If yes, it does not perform autofill; otherwise, it does.

Delaying the solution to this poorly designed feature, I don’t think, can even be attributed to the number of URL variables that a user inputs because, let’s be honest, I don’t believe the average user has more than 30 or 50 items with custom URLs. Normally, when an item is saved, the first URL entered is then used. This applies to 99% of the items saved in the vault.

Providing the ability to execute a filter based on a string/URL more complex than just the domain name is an important feature.

It's been years since the first complaints about this issue. When do you plan to solve it?

G

germansupply

Please add me to the customers who need this feature badly.

Our use case is the shipping portal of Canada Post. 1Password wants to populate the form fields and one the 1P gizmos obscures the active field. We need to be able to turn off 1P on this site.

1

1P_Evon

1Password Employee

Hello, @germansupply. Thank you for writing in.

https://releases.1password.com/b5x/stable/#1password-in-the-browser-8.10.54:%7E:text=%E2%80%9CHide%20on%20this%20page%E2%80%9D%20settings%20will%20now%20be%20saved%20after%20a%20browser%20restart. to ensure that the "Hide on this page" option now remains saved even after you restart your browser. First, navigate to the page where you want to hide 1Password, right-click on the field, and select 1Password - Password Manager > Hide on this page.

If you are looking for something different, please let me know. I'll be happy to share your feedback with the team. 🙂

-Evon

K

kiwiant

Hi Evon,

For CRM systems this simply isn't an option. Consider the following pattern which would require every single one of our users to use the "Hide on page" for every single contact in our system (200,000). They would spend more time hiding 1Password forms than doing their real job.

https://site.com/contacts/new
https://site.com/contacts/216257
https://site.com/contacts/217288
https://site.com/contacts/218916
…

All we want is for Hide on this page to have a Hide on this site option (and have it persist). Problem solved.

Just to be clear the main problem for us is the Identities, and the 1Password icon block textbox indicators and custom dropdown list icons. As an admin it would be great to have a single site block list I can manage so centralised and we don't need to educate every new user on how to block a site.

Solutions that don't work (offered by support):

Disable "Offer to save and fill logins and other items". Goes without saving this prevents key functionality for all sites.
Disable "Show autofill suggestions when form field is in focus". This prevents the identity popping up but the 1Password icon remains blocking key bits of the text fields, and we lose Identity on every other web site.

J

jsto

This is long overdue. Here's another use case for needing to blocklist:

I have a yubikey that adds a random string of characters to the end of my password for certain sites for work. The password will be different every time so there's no sense in having 1Password remember it. Telling the automated "Do you want to save this" screen to go away several times a day is really annoying.

Show more replies

The only close to workaround I've found as an administrator is this:

then do the filters for "Never fill on this website" for both.

Sign up

1Password employees: Sign in with SSO

Login to the community

1Password employees: Sign in with SSO

Scanning file for viruses.

This file cannot be downloaded