Forum Discussion

Former Member's avatar
Former Member
2 years ago

What is the countermeasure against coffee shops?

Hi team, I signed up recently on a trial to pilot the tool for my team. How can someone prevent an attack if a user is in coffee shop and they step away briefly to grab coffee and attacker takes laptop with unlocked account. Allowing the attacker to open the 1Password apps and revealing the credentials.

What prevents Chrome Extension or Desktop apps from activating or is there a kill switch in these types of attacks?

1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided
Browser:_ Not Provided

macos

1 Reply

Sort By
  • GreyM1P's avatar
    GreyM1P
    Icon for 1Password Team rank1Password Team
    2 years ago

    Hi there @rackhax

    1Password can auto-lock after a specified amount of time (as little as 1 minute) and/or when the device locks: How to set 1Password to lock automatically.

    However, if someone leaves their device unlocked, unattended, in a public place, there isn't really anything 1Password can do to prevent that or mitigate against its effects. In cases like that, I'd recommend a short auto-lock timeout for 1Password, but ideally, a short auto-lock timeout for the device itself to help protect its other contents too.

    Being realistic, though, the answer is to educate users to never leave their device unattended. Even in the case that no data is lost, the theft of company property is still a financial cost which can be avoided through good security practices.

    I hope that answers your question, but please do let me know if I can be of any further help. :)

    — Grey