Itβs Cybersecurity Awareness Month! Join our interactive training session, or learn about security and AI from 1Password experts.
Forum Discussion
Former Member
3 years agoSetup verification codes
On the latest iOS app, I see an option to setup 2FA authentication codes using 1Password, see screenshot.
How exactly is toss feature used?
I've been using Authy for several years, I was not aware that iOS even offered this option now. I realize this is an Authy question but I've chosen Authy currently but I don't see it kicking in, how does this work?
https://ibb.co/fr7yfzf
17 Replies
- rudy
1Password Team
It seems to not actually be clickable, but if you copy it and paste&go in Safari's url bar then it'll do the expected behavior (ask if you want to open it in 1Password). The iOS Settings -> Passwords -> Options path doesn't have anything to do with the Safari extension, it is solely telling the OS that the main iOS application can handle being provided an otpauth:// url. I'm not sure if Apple's intent there is to have sites displaying those directly going forward or not, but it's not generally applicable when a QR code or the OTP secret is on that device's screen. It's possibly helpful if you're using the iOS device's camera to open a QR code's url from another device or paper or something.
- Former Member
I'm still not sure I understand. I opened this page in iOS Safari but the otpauth:// link you provided is NOT clickable. Should it be?
Besides, I have NEVER seen a "raw" otpauth:// URL on any 2FA sign up flow. Sites provide a QR code and/or the alphanumeric code that represents the TOTP seed.
Even when I go to your test page at https://fill.dev/form/registration-2fa in Safari, I do not see the 1Password extension kicking in.
- rudy
1Password Team
@shhh,
You're not missing anything, that's not how that OS feature works. If you had an otpauth:// url on that page, or extracted it from the QR code and you tried to load that url, that would've bounced you over to the iOS app and it would have let you pick an item to attach it to (or create a new item to contain it).
example:
otpauth://totp/?secret=HXDMVJECJJWSRB3HWIZR4IFUGFTMXBOZ - Former Member
I went to a site and signed up for 2FA. Change iOS Settings > Password > Options to choose 1Password to generate verification codes. It produced the usual page with a QR code and the corresponding alphanumeric key and a text box to enter the generated TOTP code. The iOS Safari extension did not appear to recognize any of these elements. In contrast, the browser add-on Scan QR code feature is such a pleasant experience.
Am I missing something?
- rudy
1Password Team
@shhh,
You should be able to use it with any site that produces an otpauth:// url for their 2FA enrollment.
- Former Member
1P_Dave How can I take this for a spin? And I am guessing this works only on Safari browser on iOS? I use Firefox so I am out of luck?
- 1P_Dave
Moderator
Hello @shhh! π
This is a new iOS feature that I believe we're started testing with the latest beta version of 1Password for iOS. It allows you to ingest TOTP seeds so that you can easily setup two-factor authentication for the apps that you use on your iPhone or iPad.
So, for example, if you try to setup two-factor authentication for an account via an iOS app on your iPhone, and 1Password is enabled for the "Setup Verification Codes Using..." feature, Password AutoFill should offer to save your one-time password in 1Password without you having to scan a QR code or save the secret manually.
I hope that helps! π
-Dave