Protect what matters – even after you're gone. Make a plan for your digital legacy today.
watchtower
36 TopicsFeature Request: Proactive Expiry Events for Service Account Tokens in Events API
Hi 1Password Team, I am managing 1Password integrations in a Kubernetes environment. We currently use the Events API to stream logs into our centralized observability platform (VictoriaLogs). The Problem: The current Events API is action-based. For Service Account Tokens, there is no proactive event (like "Token Expiring Soon") via the API. We only discover a token has expired when our controllers log a 401 error: "status 401: Authentication: (Invalid bearer token), go-jose/go-jose/jwt: validation failed, token is expired (exp)" Feature Requests: Status-based Events: Does 1Password plan to support proactive events such as "service_account.token.expiring_soon"? Webhook Support: Are there plans for Webhooks to alert on critical auth failures or lifecycle changes? Audit Log Coverage: Can "System-triggered Expiry" be added as an action in the Audit Log? Our goal is to prevent production incidents caused by expired credentials. Looking forward to your insights.2Views0likes0CommentsNew/confirmed passwords don't match
I'm a new user and in the process of updating passwords for my existing accounts. However I'm struggling with getting the newly generated password to match the Confirmed password. I saw a previous discussion from 2 years ago on this, but no resolution was indicated. I've tried to copy/paste, however the Copy function isn't permitted. How do we fix / get around this?11Views0likes0CommentsWatchtower and Two-factor authentication
My Watchtower has flagged nine "sites that have two-factor authentication but you haven't set it up yet". However, six of these sites are set up with passkeys. The other three sites are two-factor enabled. Why is the Watchtower flagging the three two-factor enabled sites? Why is the Watchtower flagging passkey sites? Are not passkeys a two-factor method?55Views0likes5CommentsFeature Request: Autofill Activity Log to Track
I have two important security feature requests that would significantly help protect users from unauthorized charges and fraudulent activities: Request 1: Autofill Activity Log In our non-secure internet environment with millions of phishing sites, credit cards are at constant risk. I would like to request a simple but necessary feature to log all autofill activities. This log should track: - Which account/website received autofilled data - What type of data was filled (credit card, personal info, etc.) - When the autofill occurred When users wake up with unauthorized credit card charges, they could check this log to identify exactly where their card information was entered. This would be invaluable for investigating fraudulent transactions and understanding how their data was compromised. Request 2: Enhanced Security Safeguards (1Pass) I also request that 1Password implement stronger security guards that can: - Detect and warn users if a site appears to be phishing - Verify that card forms are contained within authorized iframes and not in suspicious containers - Alert users when data collection might be happening on unverified forms - Prevent autofill on suspicious or unverified payment forms These two features would provide users with both accountability (knowing where their data went) and protection (preventing accidental submission of data to malicious sites). This would be a significant step forward in browser security and payment protection.10Views0likes0CommentsHow To Remove Duplicates in v8.11.20
I researched removing duplicate entries in 1Password, and most articles talk about using the remove duplicate entries item in Watchtower. However, that tab doesn't exist anymore. How do I remove duplicate entries in 1Password? I am using Windows 11 Pro with the latest edition of the 1Password app.Solved45Views0likes2CommentsFinding Almost Duplicates
Hello All, I support 1Password in our company of mostly Mac computers. (new to it myself, though) We have a user on a Macbook Air who imported passwords three times over the last year. (I'll give him credit. He's trying!) Each import does have a tag with the import date. I want to remove the old duplicated items from his vault. Watchtower does not show any duplicates. My guess, I haven't confirmed yet, that the items are not exact duplicates. Certainly the tags are different. (Hmm, maybe if I delete the tags they would become duplicates?) I don't want to just delete all items with an old tag because I I can't confirm that all the old ones (> 300 items) have new versions. Maybe there's a way to do that? Maybe we export all of them, delete duplicates in Excel, delete all in 1Password, and then import them again? I'm liking this option. When he did the imports, it didn't keep the Titles. It made new Titles with the website+username (I think). Yuck! Screwed up his logins for apps. This brings up a missing feature. When 1Password imports items, it would be good if it recognized the duplicates at that time and then give options on what to do with them, e.g. not import, keep newest, keep oldest, keep both, merge (?). I'm sure there's a feature request site somewhere. Thank you for any advice.45Views0likes4CommentsWatchtower score not identical
Hi All, I have 1Password installed on my Mac, Windows PC and iPhone. The Watchtower score on my Mac and iPhone is 1190. The Watchtower score on my Windows PC is 1150. (A difference of 40 points) Given I am logged into the same 1Password account on all three devices, shouldn't the Watchtower score be the same across all three? I've checked and there are no un-synced changes or anything... Can anyone suggest what the problem/issue is? Mac OS 26.0.1 1Password for Mac 8.11.12 (81112027) --- Windows 11 24H2 (OS Build 26100.6725) 1Password for Windows 8.11.12 (81112027) --- iOS 26.0.1 1Password for iOS 8.11.12 (81112027)76Views0likes6CommentsIs this phishing
I received this very realistic email that seems coming from watchtower. Is it real or phishing? It comes from mailto:watchtower@eightninety.com Contact us weblink is: [link removed] Secure my account button has weblink: [link removed] I believe its phishing but its very convincing, and I am also concerned some people might click it if that's the caseSolved49Views0likes1CommentDuplicate entries after imports
I'm new for 1password. I imported my passwords from Bitwarden and my Google account and now I have dozen of duplicated entries. I tried to use a Watchtower but it doesn't see any duplicates at all. The duplicated items are different in tags and time of editing and might that is the problem. Any way to delete the duplicates despite of the differences? Can I define to the Watchtower search the fields that are relevant for comparison (or event better the fields that aren't relevant)? Thanks ahead for the help!121Views0likes6Comments