Forum Discussion

Former Member's avatar
Former Member
3 years ago

Not opening non-http URLs

I use 1P as a launcher for various services. One example is opening FileMaker files via URL: fmp://host.name/file_name They open fine in v7, but in the latest v8 beta, it won't open the link unl...
betas
1P_Ben's avatar
1P_Ben
Icon for 1Password Team rank1Password Team
3 years ago

Hi folks,

I spoke with our security team on this. I'm afraid I don't have the answer you were hoping for, but I do have an answer.

Restricting which URLs 1Password will open is an intentional limitation. We must not allow arbitrary protocol handlers, especially in a world with shared vaults, Psst!, etc. Unrestricted handlers could be exploited to enable one 1Password user to attack another. We should have limited it in the past, but we finally addressed it in v8.

There may be an argument to be made that we should allow more protocol handlers or change the rules based on personal/shared vaults, but at this point, it's pretty restricted to protect users. We'll continue to monitor the landscape and make adjustments as appropriate.

Ben