Forum Discussion

MikeTheCanuck's avatar
MikeTheCanuck
Occasional Contributor
6 months ago

Still irregularly having trouble TouchID'ing the SSH key prompt

I setup SSH keys in my 1Password client for use on my macOS box - must've done it a year ago or more. I have SSH access setup to a variety of github repos (enterprise and cloud), and when I'm switching between a variety of VSCode windows (each open to a different repo), I'm prompted a few times a day to unlock those SSH keys so VSCode can check for any new commits to the repo.

Seems an excellent system design, giving me quick TouchID-based access to SSH keys that are portable between computers.

Trouble is, to this day I end up in situations once every 2nd or 3rd try where the TouchID prompt doesn't respond when I carefully and correctly place the designated finger on my TouchID button on the keyboard. My best guess, there's something about the "focus" of that TouchID prompt window that is very sensitive to its intended state, and if I errantly move the focus to any other window before I notice and respond to the TouchID prompt, it won't ever receive the fingerprint auth and unlock the key.

I've tried clicking on the TouchID prompt, thinking "surely if I give it primary focus and then place the finger, it'll receive the input and unlock the SSH key". No dice.

I've tried clicking on some other window (maybe the focus needs to NOT be on the window?), no dice.

I've tried clicking on another window, then clicking again on the TouchID prompt. Nope.

I've tried other click combinations followed by clicking back into the VSCode window that originated this sequence. No luck.

I can only conclude that 1Password has some unique "interim" state for this TouchID prompt, and if I don't place my finger correctly before some other window gets focus, all is lost. So I've recently started to just hit the Deny button, which causes the VSCode-github integration to throw a modal and complain it ran into an error. (no shame on the github extension, it's only doing as much as it knows to do)

I try to be very deliberate about my workflow now, knowing that I can "spook" 1Password too easily and end up in some no-mans-land of window focus where my only option is to Deny the prompt, Cancel the VSCode-github error modal, and try to sync one more time. Still it often "loses its magic focus" and I have to Deny. Usually works the 2nd or third time, but boy is this is a flow-breaker.

I'm getting to the point where, as much as I've thrown all my eggs into the 1Password basket (1000+ objects in my vaults and counting), I'm sorely tempted to just export these SSH keys and stuff them into the native macOS locations once again. I'll probably just end up storing them unsecured, so I don't have to do the sudo dance every time (which is obviously worse security than I'm achieving now), but I'm just so tired of playing this game of "tag" with 1Password's SSH keystore & agent.

Help? Is there a bugfix on the horizon - or some "cannot repro" bug I can assist with narrowing in on these semi-reproducible conditions?

1 Reply