1Password 4.3 for Mac: The full release notes

1Password 4 for Mac icon

Last week Tuesday we released 1Password 4.3 for Mac and 1Password 4.5 for iOS, updates that were both so large that I figured I’d skip listing their full release notes for fear of making you scroll your morning and afternoon away. But we had enough requests to see the full release notes here on the blog, so I am happy to deliver!

What follows is every last big feature and little improvement that make 1Password 4.3 for Mac so fantastic.

Read more

1Password 4.5 for iOS and 4.3 for Mac are out and on Launch Celebration Sale!

One could say we’ve been busy these last couple of months, but that would only be the half of it. We have two great releases today that are packed with so much stuff, we had to cut down on our What’s New text just to fit it within the App Store requirements.

1Password 4.5 for iOS

1Password 4 for iOS iconCompletely redesigned. Multiple Vaults and Sharing. AirDrop. Search always where you need it. A unified AutoFill tool in 1Browser. This is our biggest free update for iOS ever and you can get the full details on why in the App Store.

Plus, all versions of 1Password are 50% off through the 4/26-27 weekend for our Launch Celebration Sale! Pick up 1Password for iOS now for just $8.99!

1Password 4.3 for Mac

1Password 4 for Mac icon1Password mini can now search everything, use a healthy dose of keyboard shortcuts, and show your Secure Notes. Go full screen. Sync your data file on a USB drive. Mac App Store customers also get all the great stuff from our 4.2 web release, like AutoSave updating existing Login items when you change passwords (that’s a big one!), editing items right in 1Password mini, and more.

Check out the full details in our changelog or on the Mac App Store, and don’t miss the Launch Celebration Sale here too. Through April 27, pick up 1Password for Mac in our web store or the Mac App Store for just $24.99!

The 1Password at Macworld/iWorld 2014 megastravaganza post!

MW iW 2014 pre-conf team

We’re in San Francisco for Macworld/iWorld 2014—and for you! We love hearing from our customers, and we have booth #39 in the Appalooza so we can hear from you in person this week! We’ve spent the day getting the booth ready and tracking down that one thing we need to make it all work. Now we’re just excited to get the show on the road.

Swing by anytime Thursday, Friday, or Saturday during the conference to say hi. Bring a friend if you like! In fact, we’re bringing a friend on Friday from 11am-12pm—Joe Kissell, he of the Take Control of 1Password book.

Our co-founder Dave Teare is also going to be on the Main Stage Thursday, March 27 in Mac Gems: Meet the Developers. He’ll join Jennifer Bell of Prosoft Engineering, John Chaffee of BusyMac, and Greg Scown of Smile to talk everything from ‘where do the great ideas come from?’ to ‘the risks and rewards of the Mac App Store and developing software in general’. Be sure to catch the panel and learn from some of the best in the Apple community.

Last but not least, 1Password 4 for Mac (and Windows!) is 50 percent off to celebrate Macworld/iWorld! You can get the sale price in our web store and in the Mac App Store, so it’s up to you!

Whether you pick up 1Password on sale or not, be sure to swing by our booth at the conference to say hi!

1Password for Mac Tips: How to update your passwords

1P4 Mac update Login

In every password’s life, there comes a time to get changed. Maybe it was never a very good password to begin with, maybe you were a victim of password reuse, or maybe you were among the 200 million accounts stolen in the recent Adobe and Sony breaches.

Fact is: every password dies, not every password really lives.

When it’s time to change a password, the latest versions of our browser extension and 1Password 4 for Mac make it really, really easy. Give this a shot:

  • Use the extension to log into your service of choice
  • Go to the password reset page, it’s usually in Settings or Options somewhere
  • (Optional) If your current password is required, click our extension and mouse to the right of the Login you want to update. Your details will appear in a menu to the right. Mouseover your password and click to copy it to your clipboard, then paste it into the Current Password field in the webpage (keyboard shortcut fans will be happy to know you can do all this with arrows keys and Return to copy the password)
  • Click our browser extension and go to the Password Generator to get a unique, super strong new password. Customize any details you like (such as length or special characters), then click Fill to automatically fill it into the New Password fields on the page
  • Click the Save button in the password reset form, and the 1Password extension will offer to update your existing Login, much like that glorious window you see above. If you have multiple Logins for the current site, be sure to pick the right one to update

Click Update in that window, and your new password is now saved for your existing Login! But wait, there’s more, and you can see it if you click that little details arrow next to the Login name:

1P4 Mac update Login extra details

If you make use of 1Password’s tags and folders (you should, they’re really handy!), you can add tags and file this updated Login into an existing folder, all right from the extension. Plus, if you give 1Password 4 for Mac’s new Security Audit feature a whirl, you can get a good idea of which passwords you might want to update first. Super cool?

Very super cool.

[Update – sale has ended, thanks everyone!] App Santa brings you 1Password and other great indie iOS apps at up to 60% off!

App Santa - 320x50@2x

Update – App Santa has packed it up for the season, so the sale has ended! Thanks everyone!

Our elf friends at Readdle, Contrast, and nearly a dozen other shops have been busy this holiday season, and we’ve put together the best present yet! Some of the most popular, useful, and just plain super iPhone and iPad apps, including 1Password for iOS, are up to 60% off!

1Password is just $9.99. Realmac Software’s beautifully simple to-do app Clear+ is just $1.99. One of my personal favorites, Bloom Built’s Day One journal/diary is only $2.99. App Santa has 15 apps in his sack this year, so whether they’re for yourself or friends or family, check out AppSanta.co for awesome deals on some of the best indie apps that could ever grace an iPhone or iPad.

If you’re looking for something password-y on the Mac for yourself or as a gift, we’re also celebrating two recent major awards with a 30%-off sale on 1Password for Mac!

1Password for Mac Tip: One-click to tidy up your vault

Passwords mingling with LoginsYour 1Password 4 for Mac vault is probably filled with a collection of website Logins, Secure Notes, reward program memberships, and more. There may also be a number of Generated Password items too, and some of them might be redundant because they were turned into Logins. If you want a simple way to clean up these redundant items (and an explanation for why they’re there), here’s a quick trick you can use.

Simply unlock 1Password with your Master Password, then go to Help > Tools > Remove Redundant Generated Passwords. You’ll get a prompt like the one below, telling you how many items were found and offering the chance to back out.

Trash redundant duplicates

Note: I have over 1,500 items, so your results may vary :)

If you click Move to Trash, 1Password will do your bidding. To err on the side of caution, 1Password does not automatically empty the Trash, so you have one last opportunity to recover any you might need.

The backstory, if you’re curious

Erring on the side of caution is the reason these redundant Generated Password items are around in the first place. In many cases, we can detect when a Generated Password item becomes a Login, and we automatically convert the item to get it out of your way.

Bonus Tip: click any Generated Password item, then click the Convert to Login button at the bottom to perform this process manually.

However, in some cases, we can’t detect this Password –> Login process. Instead of guessing wrongly and deleting an item that you actually need, we play it safe and keep them around. But with this Remove Redundant Generated Passwords tool, we gave you a choice and a quick way to do some spring vault cleaning.

MAS best of 2013

1Password is a Mac App Store Best of 2013, so let’s have a saleabration!

MAS best of 2013

It’s only Tuesday, but I think it’s safe to say this is already one of our Best Weeks of 2013.

Yesterday we woke up to the wonderful news that Macworld gave us a 2013 Editors’ Choice Award, and this morning Apple says 1Password is one of the Best Apps of 2013!

To celebrate such wonderful presents, we spiked some eggnog, then we spiked our 1Password for Mac price by 30 percent so everyone can enjoy simple, convenient security over the holidays.

If you’ve had your eye on 1Password for Mac or it would make a great gift for someone, now is the perfect time. The sale ends with 2013.

Eddy Award 386px

1Password 4 for Mac wins a 2013 Macworld Eddy

Macworld_EddyWe could hardly believe our Twitter and Facebook followers this morning, but there it is, plain as day: 1Password 4 for Mac won a 2013 Macworld Eddy!

The fine folks at Macworld say “1Password offers the best combination of convenience and security that we’ve seen.” We may be just a teeny bit biased, but we’re inclined to agree. This is also perfect timing, since we’ve been talking about our plans for Macworld/iWorld 2014.

We’d like to thank everyone at Macworld for this award, and every single one of our customers for helping us get where we are. 1Password wouldn’t be what it is today without our customers, and we’ll never forget it.

1Password 4.1 for Mac: The Little Big Update

1Password 4 for Mac has only been out for two months, but we just couldn’t wait to get you an early holiday present—our first major update! 1Password 4.1 for Mac is now available for our website customers, and it is waiting for review out for Mac App Store customers as well. "4.1" may look like a small update, but it packs some great big stuff, including something we’ve wanted for a long time: updating Login passwords right from the browser extension!

1P4 Mac 4.1 update existing login

 

Now with 1Password 4.1 for Mac, when you update your password at a website (ideally using our Strong Password Generator!), our new save dialog has the option to create a new login or "Update existing Login." If you have more than one Login for the site, you can choose which Login to update. Toss in the ability to tag and add this Login to a folder on-the-fly, and this is pretty much the greatest way to create new Logins and update them down the road when the need arises.

There’s plenty more goodness where this came from, we also have: a new "Top" Item List Layout (yep, we brought back the traditional item list for the old schoolers), a new search-by-title option, printing (both individual items and your entire vault—careful with that last one!), some Wi-Fi Sync fixes, and more.

Check the gallery below for more highlights, get the full details in our changelog, or dive right in. Website customers can use 1Password > Check for Updates right now, and Mac App Store customers can check the store’s Updates tab.

Time to give 1Password 4 for Mac’s Security Audit a whirl

1Password Security AuditIt was bound to happen eventually. A massive Adobe data theft of 130 million customer names, emails, encrypted passwords, source code, and more will enable almost limitless password reuse attacks in the coming weeks.

Suppose you are one of the 130 million people who’s oddly encrypted passwords were among the Adobe password breach. Suppose that you used the same password there as you do for PayPal.

To make matters worse, suppose you actually listed that fact in Adobe’s password hint. Since the malicious attackers dumped the Adobe data online, a quick check of Adobe customer password hints shows that there are more than 700 that say things like “paypal” or “sameaspaypal”. There are more than 20,000 hints referring to “bank”. I will talk about password hints at some other time; my point here is all about password reuse.

Only a fraction of the people who are reusing passwords will make that clear in their password hints. We already know password reuse is common. We also know that criminals do indeed exploit password to steal from people.

I am very tempted to explain all about Adobe’s peculiar method of storing passwords. It’s really a cool story with lots of interesting lessons, and explaining it would involve poorly encrypted pictures of a penguin.

I am also tempted to dive into gory details of the statistical properties of the data, the analysis of which has kept my computer busy for days on end. Likewise, I could rant about Cupid Media’s failure to encrypt or hash passwords for 42 million customers. Or I could talk about privilege escalation and the MacRumors discussion forums breach of 860,000 hashed passwords a week earlier, leading to the capture of all 860,000 hashed passwords.

But it is far more important for me to repeat what we’ve said in many different ways and at many different times: Password reuse—using the same password for different sites and services—is probably the biggest security problem with password behavior.

We want to fix that.

Knowing the right thing to do is easier than doing the right thing

Like most people, you weren’t born using 1Password, it’s something that came to use later in life. Now that you use 1Password, you will (or should) be using the Strong Password Generator when you register for a new website so you get a strong, unique password.

But think back to those dark days when you needed to come up with passwords on your own. You probably picked from a small handful that you had memorized, so now you’re stuck with a bunch of sites and services for which you used the same password.

Security Audit selections

Getting all of those old passwords sorted out is going to be a chore, but it doesn’t have to be done all at once. Best of all, 1Password 4 for Mac can help, thanks to its new Security Audit feature.

Let’s use an analogy: say that Molly (one of my dogs, and not really the cleverest of beasts) has just started using 1Password. She has a few passwords, but not many. Even though she doesn’t know how to push open a door that is already ajar, she can make use of the new Security Audit tool in 1Password for Mac.

In the left sidebar of 1Password 4 for Mac, down toward the bottom, there is a section called “Security Audit”. When Molly clicks (or paws) “Show” next to “Security Audit” she sees a number of audits available. She can select “Weak Passwords”, which will show her all of her items with weak passwords. She can also look at password items that are old. But the selection we are interested in today is “Duplicate Passwords”.

Security Audit: Molly's duplicates

Security Audit in 1Password 4 for Mac, displaying Molly’s duplicate passwords

What Molly sees is that she has two sets of duplicates. One of them is used for two Logins, and the other one is used for four Logins. As we can see, her Adobe.com password of “squirrel” is used for her Barkbook, Treats R Us, Cat Chasers Logins as well.

Molly transfixed by "squirrel"Molly should, of course, go to each of those sites and change her passwords on them. But there are squirrels in the back yard to bark at, and changing all of those passwords may seem overwhelming. So Patty (the cleverer dog in the family) advises Molly to think about which of those Logins are most crucial. Molly can’t tolerate the thought of anyone else getting a treat; so she starts with Treats are Us.

This does mean going to the Treats are Us site and using its password change mechanism. 1Password is smart, but it isn’t quite smart enough to go browsing through the sites to find their password change pages. Molly may decide that her Barkbook Login is also very important, and so will change that one right away as well.

Ideally, Molly should fix all of her weak and duplicate passwords as soon as possible. And as Molly has only a handful of Logins, she could do that. But for those of us who may have a large number of old accounts, it is probably best to check Security Audit and update reused or weak passwords at the most important sites first. Then, updating other passwords a few at a time is an easy way to make all our accounts much more secure.