Our community is getting an upgrade on July 2nd! Learn more in the FAQs →
feature request
99 TopicsFeature Request: See WHO added/edited an item record
Hi All, We are sharing 1Password items using department vaults, together with a lot of different colleagues in our corporate environment. We would like to see who has added (or modified) a specific record. Currently, the Added on and Last edited date are shown, but this does not reveal the user that has performed this action. Preferred feature in red below: This would help a lot tracing the items owners in our corporate vaults, thanks!28Views0likes1CommentPotential feature request - Per site auto sign in toggle
I opened a support case for this and was told to disable auto sign in to fix this, but that is kind of a "make everything sub-optimal to fix one issue" sort of thing. The site sync.com recently "improved" their website, in that they now have a deep captcha check that takes several seconds to complete, however they put it on both their main login page and their MFA page. So I can wait for the captcha to come ready, check it, then use 1Password to fill my user name and password. On the next page it asks for the MFA code, the browser extension properly recognizes it, fills in the MFA code and tries to sign in, but there's another captcha on that page which doesn't get completed so, in another great "improvement" kicks me completely out of the login flow back to the inital page with a "blocked by CloudFlare" error. The only way to use 1Password with sync.com right now is to either drag and drop the credentials in and not use autofill at all or disable auto sign in globally to allow this one site to work. It'd be nice to be able to have a per-site workaround for sites like this that render themselves incompable with the normal 1Password workflow.Solved27Views0likes3CommentsCan we get 1st-party support for keyboard shortcuts?
Now that the interface to edit/set keyboard shortcuts has been removed from 1Password running under Wayland, It would be preferable if the installation package made the shortcuts available to configure by default, rather than https://support.1password.com/keyboard-shortcuts/?linux#wayland. I wrote about this before under a blog of post yours, but it was ignored. It's trivial to add Desktop Action sections to your existing launcher file, and reference them in an Actions= directive: [Desktop Entry] Name=1Password Exec=/opt/1Password/1password %U Terminal=false Type=Application Icon=1password StartupWMClass=1Password Comment=Password manager and secure wallet MimeType=x-scheme-handler/onepassword;x-scheme-handler/onepassword8; Categories=Office; Actions=Show;QuickAccess;Lock;Fill; [Desktop Action Show] Name=Show 1Password Icon=window-symbolic Exec=1password --show [Desktop Action QuickAccess] Name=Show Quick Access Icon=search-symbolic Exec=1password --quick-access [Desktop Action Lock] Name=Lock 1Password Icon=lock-symbolic Exec=1password --show [Desktop Action Fill] Name=Fill in Browser Icon=web-browser-symbolic Exec=1password --fill Putting a symlink to this expanded .desktop file under /usr/share/kglobalaccel/ makes those keyboard shortcuts appear in KDE Plasma's Settings app:68Views1like3CommentsDon't merge *.company.com. Treat company.com as a top level domain.
We've purchased 1password business to help employees manage internal passwords. Many of these systems are on the same *.company.com domain. 1Password keeps linking these different systems into the same record. Creating records and then manually changing the "Only fill on this exact host" option is extremely clunky. How can we: Set a default option for all our users for 1Password to always match on exact host? or Make 1Password treat our internal domains (e.g. company.com, company.local) as top level domains - ideally this would be a policy we can configure?Solved30Views0likes1CommentFeature Request: Better security for MFA codes in records...
I posted this at 1Password at home, but I actually think this would be well suited for at home users or at work. So I post here as well - - Currently, storing both a password and its corresponding Multi-Factor Authentication (MFA/TOTP) seed within the same 1Password item creates a "single point of failure." If a device or 1Password session is left unlocked, an unauthorized user gains immediate access to both factors. I am requesting a feature that allows administrators (or individual users) to require a secondary validation (such as re-entering the Master Password, using Biometrics, or confirming a 1Password-level MFA prompt) before 1Password will reveal or autofill specific TOTP codes. The Problem While storing MFA codes in 1Password is incredibly convenient, it inherently violates the core principle of MFA (combining something you know with something you have). If an attacker gains access to the 1Password vault, the security benefit of MFA is effectively neutralized for that account. Proposed Solution Introduce a Step-Up Authentication / Conditional Access policy specifically for MFA fields. MFA Vault Lock: When a user attempts to copy, view, or autofill a TOTP code, 1Password should challenge the user for authentication. Customizable TTL (Time-to-Live): Users or admins should be able to configure how often this challenge occurs. Options could include: Every time the MFA code is accessed. Once per session / Once a day. After X minutes of inactivity. Administrative Control (1Password Business): Enforce this via Policies in the Admin Console, allowing organizations to mandate that all stored MFA codes require a secondary check, mitigating the risk of compromised employee endpoints. Use Case Example An employee opens a shared vault to log into a critical infrastructure tool. 1Password autofills the username and password normally. When the employee clicks the MFA field to copy the token, a biometrics prompt (Touch ID/Face ID) or a 1Password MFA prompt appears. Once validated, the token is revealed/filled, and the validation remains active for the next 8 hours (or whatever limit the admin set). Benefits Enhanced Security: Preserves the integrity of two-factor authentication even when stored in a single password manager. Enterprise Compliance: Helps businesses meet strict compliance frameworks (like SOC2 or ISO 27001) that frown upon storing passwords and MFA tokens together without isolating controls. User Flexibility: Maintains the convenience of 1Password's autofill while adding a vital speedbump for sensitive data.43Views0likes1Comment1Password in FileMaker Pro
As a longtime user of both 1Password and FileMaker Pro I still wonder if it isn’t possible to somehow use 1Password to automatically fill username/password when I open up a FileMaker database. Since I’m not just a user but a developer I need to open up different databases a lot every day. And although I store my passwords in 1Password there is no way to auto-enter them directly. I still need to copy-paste (that’s the downfall of using a different password for every login) the password from 1Password to FileMaker Pro.60Views0likes5CommentsShow the requested credential
I'm heavily using 1password now for agentic usage. All of my business is set up on it now, and all of my credentials are locally using op://, or service accounts. I've put in a lot of effort to try and isolate systems using least privilege, but one problem is that when agents (or applications) request a credential from the system, it doesn't say WHAT credential is being requested. Half the time it doesn't even say the correct name for the application making the request, either. This is a big problem, because I'm starting to get into the habit of just spamming "Accept" blindly. But the whole reason I have set up this whole pipeline is so I can catch malicious programs trying to gain access - for example, supply chain attack infections. Without seeing what credential is being requested, and the process information that is requesting it, I'm finding it's not actually adding much protection at all, because it's putting me into a false sense of security and promoting bad habits. If I'm running multiple agents in parallel, which is often the case, it might just say "Terminal requests access to your vault" or something similar. Which terminal is that? What is the underlying entity being requested? What credential? What is the process ID or terminal title, so I can isolate it to a terminal/agent? Etc. I think this is something that urgently needs to be added. Otherwise, as it stands, it's not really offering much protection because users will just go "oh, it's probably just that agent running - I'm sure it's fine" and accept everything. If that agent happened to have installed a malicious npm package, you'd probably catch it too late.54Views0likes3CommentsFeature Request: “Mirror/Clone Entries” for Cross-Vault Access Without Duplication
Hello 1Password Team, I would like to propose a feature that addresses a practical operational constraint we are currently facing with vault management. Problem Statement In our workflow, we maintain certain login credentials that need to be accessible across multiple vaults. However, due to differing user access permissions between vaults, we are forced to duplicate the same login entries across multiple vaults. This creates the following challenges: Data duplication across vaults Inconsistent updates when credentials change Increased manual effort and risk of outdated information Using a single shared vault is not a viable solution because access requirements vary between teams and users. Proposed Solution: “Mirror” or “Clone” Entries We propose introducing a feature that allows creating view-only mirrored copies of an entry across multiple vaults. Key Concept A single source entry exists. Multiple mirror copies can be placed in different vaults. Mirror entries are view-only. Any update made to the source entry automatically reflects across all mirrors. Suggested Implementation Options Option 1: Mirror Hub (Preferred) Introduce a dedicated vault (e.g., “Mirror Hub”). A designated user or admin manages source entries in this vault. Users can create mirror copies of these entries into other vaults. Ensures centralized control and governance, especially in team environments. Option 2: Flexible Source Location Allow any vault item to act as a source. Users can create mirrors of that item in other vaults. Less centralized, but more flexible. User Experience Suggestion When creating a new item: Add a new option: “Mirror Entry” Selecting this option: Displays a dropdown/list of available source entries (e.g., from Mirror Hub) User selects the item Places a mirror copy in the desired vault Benefits Eliminates duplication of sensitive data Ensures real-time consistency across vaults Reduces operational overhead Maintains strict access control per vault Ideal for team-based environments with segmented permissions Closing Note This feature would significantly improve usability and data integrity for organizations managing multiple vaults with overlapping credential requirements. I strongly believe this would be a valuable addition to 1Password and hope the team will consider it seriously. Thank you for your time and continued innovation.57Views1like3CommentsExpiration report
I'm using the date field (new) and the alert expiration. But there is no view or report to list by this fields. and no pop up or something to have visibility of alerts. That means I have to go one by one entry to see that field. My question is if there is a expiration or alert report and how to access this?63Views0likes2CommentsHow to customize the suggested item name in the auto-save prompt?
Hello. When a user saves a new login on our site (e.g. app.acme.io), the "Save in 1Password" prompt defaults to a name derived from the domain so we get "Acme" instead of "acme.io". It doesn't match our brand. We've already done what compatible-website-design recommends: brand-name <title>, application-name, apple-mobile-web-app-title, og:site_name, manifest.webmanifest (name / short_name), correct autocomplete attributes. None of these influence the suggested name. Questions: Is there a client-side mechanism (meta tag, well-known endpoint, JSON-LD…) we're missing to declare our brand name for the auto-save prompt? If not, what's the official process to submit a domain + brand name + logo to 1password Rich Icons / website database? Thanks.23Views0likes0Comments