It’s Cybersecurity Awareness Month! Join our interactive training session, or learn about security and AI from 1Password experts.
Forum Discussion
wiredhost
4 years agoNew Contributor
request: remember application approval for SSH agent
my intelliJ app has Git Toolbox plugin which checks git via SSH every 10 minutes. Due to this, I continuously get 1Password 8 on macOS asking if I want to allow this PHPStorm to access the SSH key.
Can you please add an option to remember the setting? Otherwise I need to revert moving to the 1password 8 SSH agent.
1Password Version: 8.9.4
Extension Version: Not Provided
OS Version: macOS
Browser:_ Not Provided
23 Replies
- floris_1P
1Password Team
@truecarry Which version of 1Password for Windows are you using? We've recently made some improvements in this area.
- Former Member
I'm facing similar but opposite issue. Whenever I'm doing git fetch/push through vscode or Github Desktop, 1Password just silently shows red circle on tray icon(Windows). To sign commit I need to click tray icon, click on 'SSH Request waiting approval', and do it again right after to sign commit with my key. I guess github/vscode spawns new instances of git, so it triggers new confirmations. It would be great to atleast have some approval screens in that case, instead of hunting tray icon. Ideally 1Password should somehow understand that requests comes from same source and was authorized already.
- floris_1P
1Password Team
We have made a bunch of improvements in this area. Prompts from background apps are now being silenced automatically to avoid unexpected interruptions, and you there's now a authorization model you can choose that's closer to the OpenSSH agent model.
- Jack_P_1P
1Password Team
Hi hughbiquitous:
While I can't share any specifics, we are working on making some improvements to this. Stay tuned.
Jack
- hughbiquitousNew Contributor
Following. I'm experiencing the same thing but so far I haven't been able to nail down which locking event is messing up my expectations -- still working on that though. I'm hoping to have a situation where I can grant access to the SSH key once every 12 hours (or sooner if I restart IntelliJ).
- Jack_P_1P
1Password Team
Hi @sitepodmatt:
Thanks for your feedback on this. While I can't promise anything specifically, I'll share your thoughts with the team.
Jack
- Former Member
Is this on the roadmap? Highly frustating - Make this "Note that a newly started application will always ask to authorize." a checkbox rather than a forced mandate..
- wiredhostNew Contributor
I tried those changes, and I was still getting prompted multiple times a day (i.e. every time I unlocked my machine). It was also annoying when I was writing something, and the prompt would take over my screen's focus.
I then turned it off. - Former Member
At the moment, we don’t have a way to authorize an application “for life.” However there are settings to adjust the frequency.
Under
Preferences
->Developer
, you could set it to remember an application until it or 1Password quits.Note that a newly started application will always ask to authorize.
Under
Preferences
->Security
->Auto-lock
, you can find 1Password lock settings.As for the prompts interrupting you, we have something coming soon to help alleviate that!
I’d love to get your feedback on how it feels with these settings changed!
- wiredhostNew Contributor
it would be helpful if you could collect and submit your SSH agent diagnostics
Sorry, i'm unable to provide this.
i'm constantly locking my computer when i leave it (coffee / bathroom / phone call). So having to confirm phpStorm / webStorm access to the SSH key again is terribly annoying.
Also, when i'm watching a movie, 1password's prompt is popping up for phpStorm over the movie - and for some reason not just once. It happened 3+ times (may have been different keys).Overall, good thought having SSH keys in 1password: but real world, the prompts are overboard. As @sitepodmatt mentioned: the request should be once per app, and it's set for that app.
I can't recommend my company turn this on until it's matured, and i've turned it off now and gone back to the files.