Forum Discussion
Why has 1Password stopped being updated in the Mac App Store?
Recently I've found that 1Password has been removed due to "Incompatibility" as I found in this website for example here: https://1password.community/discussion/143544/1password-disappeared-from-my-imac
You're suggesting to download 1Password distribution from your website and install it. I've found it surprising, that the 1Password which contains a lot of secret user data is being distributed in so non-secure way.
When 1Password was distributed by Apple through Mac App store we (users of 1Password) relied on apple to secury deliver it on our devices. Also we presumed that Apple would check the App for compatibility and other stuff.....
Now 1Password gave that responsibility to its own users, most of them not being any IT/Security professionals. How can I check that I download 1Password distribution from your website and no any 3rd party didn't implement man-in-the-middle attack between your website and my laptop? Also how can I be sure that delivered 1Password application is any good, while Apple notifies me that it was downloaded from the Internet, and can be harmful for me...
Can you please return your distribution to Mac App Store? Please
1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided
Browser: Not Provided
7 Replies
Got it! Thank you, Dave!
- 1P_Dave
Moderator
Thank you for the screenshot. I don't see a recommendation there to not run the installer. That's just the normal message that macOS will show telling you that the app has been scanned and found to not contain any malicious software. This is part of the Gatekeeper security feature that I mentioned earlier. From the article that I shared:
Gatekeeper also requests user approval before opening downloaded software for the first time to make sure the user hasn’t been tricked into running executable code they believed to simply be a data file.
As long as the installer has been downloaded from 1Password.com it is safe to use to install 1Password 8.
-Dave
See attached screenshot
- 1P_Dave
Thanks for the reply. You can find information about the macOS Gatekeeper feature here: Gatekeeper and runtime protection in macOS - Apple Support (CA)
My MacOS is saying that 1Password is being downloaded from the Web and it recommends me to don't run it
To help me better understand the situation I'd like to ask you to take a screenshot of what you're seeing and attach it to your reply:
-Dave
Hi Dave,
My MacOS is saying that 1Password is being downloaded from the Web and it recommends me to don't run it. Can you provide documentation or link on the Gatekeeper security feature.
I'm not a security expert, but I heard about the supply chain attacks. I'd feel more safe to have 1Password being installed through AppStore.
Thanks
- 1P_Dave
Hello pavelsh! 👋
I'm sorry for the delay in responding. As you mentioned, 1Password 8 for Mac isn't currently available in the Mac App Store. Instead, you can download the app directly through our website:
Downloading 1Password from our website allows you to install it directly from the source in a safe and secure way. Security is our primary priority here at 1Password. The 1Password 8 installer is digitally signed and the macOS Gatekeeper security feature will only allow you to install 1Password 8 once it verifies that the app's digital signature is genuine and intact.
We also undertake multiple independent security audits, which you can read about here: https://support.1password.com/security-assessments/
I hope that helps. 🙂
-Dave
