Forum Discussion

Anonymous's avatar
Anonymous
4 years ago

Windows SSH Agent without Windows Hello?

Hi!

I was very excited to try the new SSH tooling built into 1Password 8 Beta for Windows. However, I do not have Windows Hello on my desktop which sounds like a requirement to use the 1Password SSH agent on Windows (see green TIP here https://developer.1password.com/docs/ssh/get-started#step-3-turn-on-the-1password-ssh-agent).

Is there any way around this? Or are there plans for an alternative here? I don't mind entering my master password every time I need to SSH as an alternative. I'd really like to use the SSH agent :)


1Password Version: 8.6.0
Extension Version: Not Provided
OS Version: Windows 11 Pro

28 Replies

  • Anonymous's avatar
    Anonymous

    Hello, I've seen this conversation and I'm curious what is the status of this request?
    My company dosn't allow Windows Hello because of legal reasons (GPDR)
    Would be great if this request could get the highest priority.

  • Anonymous's avatar
    Anonymous

    Former Member Thank you for the additional feedback. We're definitely doing some research here to determine how we might approach this particular scenario going forward. We need to balance security with ease of use but we know this is important to make more seamless for you!

  • Anonymous's avatar
    Anonymous

    My company (worldwide, > 100000 employees) also disabled Windows Hello for reasons unknown to me, at least for the machines located in Germany. Since regular ssh agents ask for the key password once at loading time, then never again, I would like a similar behavior in 1Password as option. Just be able to disable any prompt and just serve the key if it is requested by some ssh client.

    I understand asking for Windows hello unlock is a security measure to make me aware that a ssh key is actually requested, and to detect unexpected requests, but this is not standard behavior of ssh agents.

  • Anonymous's avatar
    Anonymous

    @mrbscreen, thanks for giving us additional context there. That definitely helps us prioritize this!

  • Anonymous's avatar
    Anonymous

    The main reason is legal hostility belonging to the German GPDR (DSGVO).

  • floris_1P's avatar
    floris_1P
    Icon for 1Password Team rank1Password Team

    It was not an easy decision to make, so we can assure you that this is high on our list.

    Our of curiosity, what's the main reason your company doesn't allow Windows Hello?

  • Anonymous's avatar
    Anonymous

    The password options is really necessary. My company, for example, does not allow the usage of "Windows Hello".

  • floris_1P's avatar
    floris_1P
    Icon for 1Password Team rank1Password Team

    Yes, it's currently a requirement, but we will be adding support for entering your account password as well in the future.