1Password 3.8 for Mac is out with support for Firefox 6/7 and a new extension setup process

Well that was quick. If it seemed like only yesterday that we released a 1Password 3.8 beta for Mac and initial support for Firefox 6 on the Mac, that’s because it was.

Today we’re happy to say that 1Password 3.8 for Mac is out of beta and so is our Firefox extension. Besides gaining support for Firefox 6 and 7 on the Mac, this 1Password update brings a great change to our extension installation process that’s been a long time coming. We have a new 1Password > Install Extensions menu option, as well as a Preferences > Browsers redesign, that takes you straight to our fancy new extension installation page. This will ensure that you get the latest version of our extensions that are regularly updated for this brave yet crazy new world of break-neck browser release schedules.

In short: if you upgrade to Firefox 6, grab 1Password 3.8 and use our new extension installation page to get the extension you need.

I should also mention that, while we have brought our new extension format to Firefox 6, we haven’t been able to bring all features back, such as right-click and HTTP auth support. We’re working on those. Also, if you need extensions for previous versions of Firefox, you can snag em from our legacy extension page. We know not everyone is always ready to upgrade their browser right away, so we’re trying to keep things as simple and available as possible for our users.

So check out the 1Password 3.8 for Mac update and the new Firefox 6 extension and let us know what you think in our forum!

A 1Password extension beta is ready for Firefox 6 on Mac!

It’s time for the Return of the 1Password! Except in our version of this bad pun there are no cute, spear-wielding woodland teddy bear, just a powerful password and identity manager with a great new browser extension in beta for Firefox 6 on Mac!

Firefox new extension

That’s right, Mozilla quietly released Firefox 6, and 1Password 3.7.5 (our most current, non-beta public release) is ready for it on the Mac! If you want to try out the new extension right now, you’ll need to:

  • Make sure you have the latest 1Password by going to 1Password > Check for Updates
  • Update to Firefox 6
  • Install the beta Firefox extension
  • Restart Firefox

If you’d rather wait, we’re putting the finishing touches on 1Password 3.8 (now in public beta), which has the added perk of supporting Firefox 7 and 8 (which are both in various stages of development testing. I know, crazy right?). So what do Firefox 6 users get with our new extension? I’m glad you asked!

  • A much more useful slice of 1Password in your browser
  • An all-new gorgeous, flexible interface that fits much better into the way you work, whether you’re a mouse jockey or a keyboard shortcut ninja
  • A bunch of new keyboard shortcuts, including Tab and Shift-Tab to navigate between your Logins, Credit Cards, and Identities, and Right/Left arrows for viewing item details or getting back out to the list of all your items
  • A more visual way to browse, edit, and create new items. You can view key details of each item, copy them to the clipboard, and edit all without dropping what you’re doing to launch the main 1Password app
  • Fast, type-as-you-go search built-in for all item types
  • A new Settings panel built into the extension for toggling things like Universal Unlock (to also unlock the 1Password app) and AutoSubmit
  • and much more!

Please note that the new Firefox extension is only supported on Firefox 6 and above (due to some of the technical complexities between Mozilla’s previous releases), and we’re still working on implementing a few features from the previous Firefox extension version, such as right-click support and HTTP logins. If you’re using Firefox 3, 4, or 5 when 1Password 3.8 arrives, don’t worry: you’ll still be able to download the proper 1Password Firefox extension for your browser from this support document. We’re also working on adding support for our new extension to 1Password for Windows, so stay tuned there. Chrome users: ditto.

But for you Firefox 6 users out there, let us know what you think of the new beta extension in our forum!

Quickie update: 1Password 3.7.1 for Mac is out

This is just a quick note to let you know that 1Password 3.7.1 is out of beta! While this doesn’t bring anything major like a much-improved new Safari extension, it does bring a few perks and fixes such as:

  • Improved AutoSubmit in Safari extension
  • Now support updating Autosave and Autosubmit settings made in Safari 5.1 extension
  • Improved error logging
  • Improved diagnostics

To grab the update, you can open 1Password and go to 1Password > Check for Updates to set our download gnomes to work.

1Password for Mac betas bring Universal Unlock, Copy to Clipboard, more

It’s been a week since Apple released Lion and Safari 5.1. In that time we’ve released a bunch of updates that bring better compatibility and restore your favorite features. We’ve also received a ton of great feedback from you on our new extension and previewed a major redesign we hope to release real soon.

Today we’re back with a pair of huge updates—1Password 3.7 beta and Safari extension 3.7 beta—sporting some great features you’ve been asking for:

  • Universal Unlock: Now when you unlock the 1Password app, the new Safari extension will follow suit
  • Copy to Clipboard from the extension: Opening the 1Password app just to copy a password for a Flash site? Old ‘n busted. In the new extension you can now find a Login, click the right arrow (or hit your right arrow key) to view its details, and click the new “Copy” button next to your password for easier pasting
  • Go & Fill/All Logins typing focus works again: After using Command-Option-\ to invoke Go & Fill, keyboard focus will be placed in the search field to keep you going and filling as quickly as possible
  • Much-improved AutoSubmit: Go to System Preferences > Universal Access > Enable Access for Assistive Devices, and 1Password will perform much better at automatically logging you in
  • Auto-Lock settings now respected: Our new extension will once again obey your preferences under 1Password > Preferences > Security for automatically locking your data file
  • Lock 1Password from the command line: For the power users in the audience, you can now lock 1Password from the command line with: “open x-onepassword-agent://lock”

It’s important to note that, while a bonus of our new official extension format is that Safari can now automatically upgrade it without us needing to update the 1Password app, this is one of the few cases where you will need to update both to enjoy these benefits. Since they are beta releases, you will also need to opt into our beta track if you want to help us polish them up for prime time.

If you need help upgrading either 1Password or the new extension, see this document. If you’ve never participated in our beta, please check out this document for how to do so an explanation of what it’s all about.

If you try both the 1Password and extension betas, please follow a couple of short steps once the update processes finish:

  • Go to System Preferences > Universal Access, and click Enable Access For Assistive Devices at the bottom of the window
  • Go to 1Password and click Help > Troubleshooting > Restart Agent
  • Restart safari with CMD-Option-Q

As usual, please join us in the forums if you have feedback on these releases!

Big Safari extension updates and a sneak peek

It’s been just four days since Apple unleashed Safari 5.1 and 10.7 Lion, a massive upgrade to nearly every aspect of your Mac. Back in June, we released a pair of updates to get the core of 1Password ready to support Lion and Safari 5.1 on Snow Leopard, and we’ve spent a lot of time over the last couple of months rewriting our Safari extension from scratch in order to comply with new technologies and rules Apple has introduced, as well as to get 1Password prepared for the Mac App Store.

In the four short days since Lion’s release, our developers (who are in no way chained to their desks with stashes of Red Bull and Pop-Tarts) have released a total of six updates to the new Safari extension and an update to the main 1Password app. Now that our extension is an official Safari extension, Safari should check periodically and update it automatically. But just in case, here’s our how-to guide if you want to update right away.

We’re listening and updating

We’ve heard every piece of feedback you’ve sent, and already we’ve restored a number of features that users missed from the previous version, and we’ve added some polish for good measure:

  • Single-Stroke Login is back: If you only have one Login for a site, hitting the default Command-\ shortcut will now skip the extension interface and log you in right away
  • Go & Fill is back: Right-clicking the Dock icon or clicking an item’s URL from the 1Password app will now open the site in a new tab in Safari and log you in
  • Performance improved across the board: We’ve made big advances in speeding up the loading of our new extension and keyboard shortcut responsiveness
  • Extension now works on blank pages, Top Sites: You can now trigger our extension with our keyboard shortcuts if you’re on a blank page, Safari’s Top Sites, or even if the keyboard focus is in the Address Bar
  • Autosubmit settings now respected: If you’ve customized a Login’s Autosubmit settings in 1Password, the new Safari extension now respects that setting
  • 1Click Bookmarks are back: If you’ve created one or more 1Click Bookmarks, they should now work again
  • The extension is now a popover: Apple introduced popovers as a new interface element on iPad, and they were such a hit that it brought them to Mac in OS X Lion. We’ve found that a popover is a great way to display more of your 1Password data inside the browser so you don’t have to stop what you’re doing to open the main app if you don’t want to
  • No longer resizes when using Safari 5.1’s Zoom features: Some Safari users like to take advantage of its clever View > Zoom In/Out/Text Only features, and an earlier version of our extension would resize itself according to those settings. Not anymore
  • Auto-Submit greatly improved: We’ve done a lot of work to improve the new extension’s ability to submit forms, and sites like Chase.com and Schwab.com should work again

Of course, these features and fixes are all in addition to the great stuff we can do with this new extension that could never be possible with the previous format. If you don’t know about all the new extension’s tricks like keyboard shortcuts and a better view of your data, you should definitely check out our intro document and FAQs, as well as our installation guide if you still need to get setup with Safari 5.1 on Snow Leopard or Lion.

We certainly aren’t taking a break though—no, not even on a Sunday. We know we have plenty of work to do and features to restore, so if you’re still missing something, please check the Known Issues in our troubleshooting guide for progress updates and explanation of what’s going on. Many of your questions have probably been answered there or in our main 1Password FAQs, so check those out.

Sneak peek at an interface revamp

Now for the sexier stuff. The new Safari extension is using a 1.0 version of our new extension interface that we introduced in Chrome last November. We redesigned the extension so we could offer a number of features users have been asking for and unify the 1Password experience across Safari, Chrome, and Firefox, as well as the aforementioned compatibility aspirations for Lion, Safari 5.1, and the Mac App Store.

We have received a lot of great feedback on this design, and based on your responses, we’ve been working on a revamp that will tighten up the interface but still provide access to our great new features like full mouse or keyboard navigation, new keyboard shortcuts, and the ability to view and copy more of your data than ever before right from the browser. Take a look:

Now remember: this is just our vision for the new extension’s design, and everything is in flux. But so far, we really like the tighter layout, reduction of white space, the ability to view more items at once, and some other pending perks that you might be able to glean from these shots.

But that’s enough about us—let us know what you think in our forums! You can of course comment here on the blog as well, but our staff can provide better assistance in the forums.

OS X Lion and the state of the new 1Password extension (Updated)

OS X Lion

Happy Lion Day everyone! The latest version of Mac OS X is here, and boy is it a whopping upgrade. We’ve been busy getting 1Password and our browser extensions prepared, and I’m pleased to say that version 3.6 brought Lion support, while version 3.6.1 upped the ante for the new Safari 5.1 on Snow Leopard.

Apple made some really big changes in Lion and Safari 5.1, so to celebrate these releases and make sure you could keep using 1Password, we introduced a completely redesigned Safari extension. Our goals were simple, as we wanted to make it easier for you to: access and view more of your 1Password information than ever before right in the browser, fill and browse all your items more quickly with a mouse or keyboard, and feel right at home using the extension in all the browsers we support.

We’ve received a ton of positive feedback and suggestions for our new extension, and we want to thank you for all of your input so far. We also know that the new extension isn’t fully feature complete yet when compared to the previous version. To help you stay on top of how we’re improving things and which features we’re still working on, we’ve created a whole new section of FAQs and documents that we’ll keep updated.

Here is our main 1Password FAQs page, and the new section dedicated to our new Safari 5.1 extension is in the top right. There you can find documents like a quick Safari 5.1 extension intro as well as a more thorough explanation of goals. We have a few more that address other issues, so you can bookmark these as we’ll be updating them when we make improvements to the extension:

There are more documents in our Lion/Safari 5.1 FAQ and possibly more to come, so you should definitely check out our updated FAQs to find some of the answers for which you seek. A couple other issues we’re looking into right now: some sites that aren’t playing well with auto-submit (such as Chase.com), the 1Password extension sometimes won’t unlock after you exit private browsing mode (until we squash that last one, restarting Safari should fix the problem), and changes to the Go & Fill behavior. A list of issues like that can be found in our troubleshooting Safari 5.1 doc.

One of the general quirks we’ve heard about the extension is performance—sometimes it has a Case of the Mondays in that it is either a little slow or, in some rare cases, doesn’t respond to keyboard shortcuts. The good news is that we’re putting the finishing polish on a big extension update that should do wonders for performance all-around. The best part? Now that it’s an official Safari extension (if you’re on Lion or Snow Leopard with Safari 5.1 installed, go check Preferences > Extensions and see!), we’ll be able to update it automatically, without even updating the main 1Password app. We hope to get that update out really soon.

I hope this helps explain where we’re at with the new Safari 5.1 extension. Keep an eye on our documentation for updates and we’ll let you know as soon as that big extension update lands!

JavaScript grows up and plays in a sandbox

About 12 years ago I was fighting a losing campaign against JavaScript’s ubiquity. There was a time when JavaScript was a security nightmare, and I ranted and raved against it. Things have changed enormously since then, all for the better. A few of the slogans that I and my colleagues shouted from the rooftops in the previous millennium seem to have stuck in the public mind, “Using JavaScript is insecure” or “JavaScript can’t be used for encryption”. Those slogans are no longer true. This post talks a little bit about how things have changed.

What has happened over the past dozen years falls into two categories. The first have to do with the way browser developers look at JavaScript. All of the vulnerabilities in handling JavaScript taught browser developers to be much more systematic and careful with how they handled JavaScript itself. The design of JavaScript and browsers have gone through a lot of change during this time.

Playing in the sandbox

Rhino Sandbox

The second category of change is more recent, and it really changes the game. The buzzword is “sandbox”, and it needs a lot of clarification because it is used all over the place in different ways. Roughly the idea is that something can do what it wants within a limited area and cannot really interact with anything outside of that sandbox. It is a safe place to play.

Increased browser sandboxing affects 1Password in two very big ways, and these are because of two different kinds of sandboxing relevant to us.

Sandboxing the browser

The first sandbox that matters for us is that browsers are becoming increasingly restrictive in what bits of your system they can interact with. The way that 1Password interacts with Safari 5.0 and earlier is profoundly different than the way that 1Password is allowed to interact with Safari 5.1 and above. Prior to Safari 5.1, there were “hooks” in Safari that allowed external applications to communicate with Safari. But in Chrome, from its inception, and in Safari from version 5.1 that kind of communication isn’t allowed. This is a major security enhancement; it limits the damage that a browser exploit can do. A successful browser exploit now can only interact with data and processes that are within the browsers’ sandboxes.

The upshot of this is that we have had to entirely redesign our Safari extension to fit within the tighter, better security model of Safari. It means that 1Password needs to work within the browser to do its job. That work must be done using only CSS, HTML, and JavaScript. Clearly for 1Password most of that work will be in JavaScript.

Sandboxing the extension

Browser extensions shouldn’t step on each others’ toes. We need to prevent this not only for security reasons, but for stability reasons. Extension X shouldn’t be able to see the database created by extension Y. So each Safari extension is also put in its own sandbox. This not only protects others from a misbehaving extension, but it protects the extension from outside interference from other sources, including JavaScript in the web page a browser is visiting.

JavaScript and encryption

People used to say that you can’t do encryption in JavaScript (because it doesn’t have the right data types, and because as in interpreted language it is far too slow). I suspect that most readers will have noticed that computers have gotten a little bit faster over the past 10 years. So while JavaScript may not be ones first choice of language coding encryption routines, there are now well developed, publicly available implementations of all of the algorithms and protocols that we rely on.

Users of 1PasswordAnywhere over the years have already experienced JavaScript opening of their 1Password data.

Times, and rules of thumb, change

It seems like yesterday (though it was actually years ago) that I was telling people to distribute documents as PDFs instead of word processer documents, because PDFs can’t be exploited in the same way. (As an aside, I would like to mention that there is a new security update for iPhone which fixes an exploit that can live in a malicious PDF file). It’s also true that the password advice I would have given 10 years ago is much different that what I would give now. The tools and the threats have changed so much. So it is with JavaScript.

Enhanced by Zemanta

Future Safari 5.1 users: meet the new 1Password extension (Updated)

As a Mac user who doesn’t live under a rock, you’ve probably heard of this Lion thing Apple plans to release soon. Lion is quite a significant upgrade for Mac OS X, and with it Apple will introduce Safari 5.1, a major update for Lion and Snow Leopard users that brings lots of great new features and perks. Being the agile folks that we are, 1Password 3.6 for Mac is already prepared, but this isn’t just a compatibility nip here and a bug tuck there. We completely rewrote our Safari for Mac extension for Safari 5.1 in the name of usability, speed, cross-platform harmony, and bringing you faster updates.

One thing to keep in mind for now, though, is that as of this writing, our new Safari extension that supports Lion and Safari 5.1 on Snow Leopard is in beta. It’s pretty solid, but there of course may be quirks, bumps, and other odd behavior, so we welcome you to catch us in the AgileBits forums with ideas and bug reports.

Once you decide to upgrade to Lion or Safari 5.1 on Snow Leopard, you’ll be prompted to install our new Safari extension because it’s the only one that will work for you. And since Apple’s releases will soon be upon us, I figured it’s time you meet the new 1Password Safari extension.

Update: If the rest of this blog post isn’t enough for you, we’ve been busy preparing more documentation and FAQs to help you get up to speed with the new extension. Check out the right side of our 1Password FAQs for everything from a quick intro, to a list of keyboard shortcuts, and some common support tips.


Our new Safari extension is based on the redesign we introduced in our Chrome extension last November. Instead of just a browser button with a couple menus, the new interface offers a more powerful and flexible slice of 1Password right inside your browser. Whether you click the toolbar button or use the default keyboard shortcut of Command-\ to trigger our Safari extension, it appears as a window that floats above the top left corner of the current page, featuring tabbed sections for Logins, Identities, Credit Cards, and our Strong Password Generator. This puts the 1Password extension’s capabilities in the spotlight for all users and makes navigating around your data much, much more convenient. It also means you can now do things that haven’t been possible before from within a browser, such as view and copy 1Password item details and even review a Login’s password history.


Using 1Password via our new Safari extension is now much faster and more efficient whether you’re a mouse user or a keyboard ninja. Most of our customers build quite long, eclectic collections of Logins, but navigating a list of even a couple dozen items with a browser button menu can be clunky; you can lose your place or miss a sub-menu and have to re-do a lot of scrolling. You also can’t really search your items or view any extra information about them. With our previous extension, you’d have to stop what you’re doing, open 1Password, unlock it, then go searching for what you need. A key goal of our new extension is to give you instant access to more of your 1Password information right there in the browser so you don’t miss a beat.

By presenting your 1Password data with this new interface, we’ve made it much easier for mouse users to navigate their data, peruse long lists of items, check or copy an item’s details, and pick the proper item without dealing with finicky menus or losing one’s place. But if you fancy yourself a keyboard ninja, you can can now open the extension, navigate your Logins, Identities, and Credit Cards, view item details, and fill a form all without ever having to touch the mouse. Check out some of our keyboard shortcuts for navigating the Safari extension:

  • Command-\ – This has been the default keyboard shortcut for quite some time to open our extension in any browser. We haven’t changed it since it’s still a great place to start. It opens our new extension interface and displays any relevant logins for the current page
  • Command-Option-\ – Opens our extension and take you straight to the All Logins tab to search for a Login. After finding the Login you want, hitting Return will open the Login’s URL, fill in your credentials, and log you in
  • Tab – On the extension’s Logins tab, this switches between the “Logins for this site” tab and “All Logins” tab
  • Right arrow keyThis one is a pretty big deal! It gives you access to much more of your 1Password data inside your browser than ever before. It allows you to view the details of any selected Login, Identity, or Credit Card. Need to copy a password for a Flash site, double-check a Credit Card’s expiration date, or verify the info in an Identity? This is a great way to do it without having to drop what you’re doing and open the 1Password app. To get back to the item list, simply hit the left arrow key
  • Command-arrow keys – Navigates between tabs for Logins, Identities, Credit Cards, and the Strong Password Generator (for Chrome users it’s Command-1, 2, 3, and 4)
  • Escape – Hides the 1Password extension and go on about your business

Cross-browser compatibility

Without delving into too many technical details, our new extension isn’t just a pretty face—it’s actually a complete architectural rewrite. There are a number of advantages to this for our developers, but for you, dear 1Password user, this means improved form filling, more features, and faster updates. In fact, this new extension format allows us to update the extension without having to update the 1Password application—that means more frequent updates and a smoother update process for you. For example, Safari and Chrome allow extensions to update automatically.

On a grander scale though, this new architecture will eventually allow us to use much more of the same code across the browsers we support. That translates to less work for our developers when it comes to keeping pace with the break-neck development cycles of Chrome and Firefox, but more importantly: a consistent, powerful, and flexible user experience no matter which browser you’re using.

Moving forward

We have a lot planned for our new browser extension, including features to add and some great interface enhancements. We’re also still working on the Firefox version, so stay tuned on that front. Ditto for our Windows users.

We’ve had an incredible response to our new extension from Chrome users over the past year, our beta testers, and early Lion and Safari 5.1 users. We think the new Safari extension marks a huge improvement to 1Password integration with the browser, making your data more accessible, and letting you get in, get out, and get back to what you’re doing faster than ever before. But that’s enough about us—let us know what you think in the comments!

1Password 3.5.12 is out for Leopard users!

Leopard logo

Ok Leopard users, this update is just for you—literally! Last month we released huge updates for Snow Leopard and Lion Mac users and Windows users, and now we have something special in store for those of you who are on Mac OS X 10.5 Leopard.

1Password 3.5.12 is available now specifically for Leopard users, and it brings a couple of key additions. First up is support for Firefox 5 on Intel-based Macs. Why does our Firefox 5 support only work for Intel-based Macs, you ask? Mostly because, with version 5, Mozilla went Intel-only with Firefox.

The other big change in 1Password 3.5.12 for Mac involves Dropbox, and this one is for both Intel and PowerPC users on Leopard. Dropbox has an upgrade coming that makes some big changes under the hood, especially in regards to protecting some of its key database files and allow applications like 1Password to figure out where your Dropbox folder is. We worked with the company to support these changes and maintain a smooth experience for 1Password users. These changes arrived in our aforementioned updates last month, and now Leopard users will be prepared for Dropbox’s upgrade when it arrives.

As usual, if you’ve had your fill of cute cat videos and hyper-stylized photos for the day, you can read our full list of changes in 1Password 3.5.12 on our versions page. Leopard users who want to update can go to 1Password > Check for Updates.

1Password 3.6.1 for Mac is ready for Safari 5.1 on Snow Leopard

One day in the near future, Apple will release Safari 5.1 in Mac OS X Lion and also as an update for Snow Leopard. And on that day, dear 1Password users, you will be ready.

Sure, we released a huge 1Password 3.6 for Mac update barely over a week ago with support for Firefox 5, Lion, and Fluid 1.0, but we aren’t much ones for sitting around and twiddling our thumbs. We’ve just released 1Password 3.6.1, a minor update with a big new feature: support for Safari 5.1 on Snow Leopard.

Safari 5.1 is a pretty big update that Apple is busy polishing, though we’re not sure when Apple will release it for Snow Leopard. But when Safari 5.1 comes out of developer beta, it’ll bring a bunch of new perks like support for full-screen web content, new features for Extensions (introduced in Safari 5), better Reader integration, and more. This means we were able to bring our new extension interface, which we introduced in Chrome last November, to Safari 5.1. Once Apple releases it to the public, Safari users will be able to enjoy our snazzy new extension pictured in this post.

A few other nips and tucks here and there, and 1Password 3.6.1 for Mac is now ready for prime time. Go to 1Password > Check for Updates to kickstart the auto-update process.