Do I have to change accounts,google.com websites individually; i.e. Facebook and YouTube?

JoyceC

I have one entry for accounts.google.com with three of their websites all with the same password. Do I have to copy the old password to change it for each website or will changing the master google password work for all three?

---

1Password Version: 1Password 5 Version 5.5.BETA-33 (550033) AgileBits
Extension Version: beta 4.5.1.b1
OS Version: OS X 10.10.5
Sync Type: Dropbox
Referrer: forum-search:change multiple website passwords

thightower

@JoyceC

If its actually a Google site, then a single change of the password would work.

You mention youtube and its is specifically a Google product so the password change would be handled by your main Google login page.

However Facebook, I am not sure of as I do not use it. If Facebook is supporting signing in through a Google password then yes it would affect that as well. * From a cursory web search looks like it is supported.

Please note even though Google and Facebook are allowing sign ons with your Google ID. You still have a very valid Facebook password. If your changing passwords for security reasons. Take a moment to change Facebook as well.

The search above I did explains how the single sign on works. Its a very old page 2009, but gives some generalities on how it all comes together. For all I know it could still be valid. https://danielmiessler.com/blog/sign-in-to-facebook-transparently-just-by-being-signed-into-google-gmail/

Megan

Hi @JoyceC,

Please let me know if you have any questions after reading Thightower's post. He's given you a pretty solid answer there. :)

JoyceC

Finally got around to trying it today. I changed the accounts.google.com password and it's a good thing I copied the old and new ones. Of course gmail worked fine but I had to change the FB and YouTube passwords on those sites. And YouTube and Accounts are two-step processes so when I do try the Open and Fill it just opens YouTube, opens and fills the e-mail address on Accounts so I have to do the copy/paste routine for the next pages. FB at least has both on the same screen. Did this make sense?

What's the odds of the Google accounts PW being discovered; am I paranoid in thinking I might want separate passwords for all three?

Happy 2016!

littlebobbytables

Hi @JoyceC,

I personally don't use single sign on when it's offered because I'm not a social network user nor want stuff connected to a Google account. I much prefer individual accounts as either way 1Password is taking care of it for me. Obviously that's just a personal preference that may not be shared by others, I just like to keep everything separate.

I may not be the best person to help with your query though because I don't use the various services but I'll do my best to try.

If I was going to log into gmail I'm sent to

https://accounts.google.com/ServiceLogin?service=mail&passive=true&rm=false&continue=https://mail.google.com/mail/&ss=1&scc=1&ltmpl=default&ltmplcache=2&emr=1&osid=1#identifier

where you can see one of the parameters is &continue=https://mail.google.com/mail/

If I try to log into YouTube I'm redirected to

https://accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Fsignin%3Ffeature%3Dsign_in_button%26next%3D%252F%26hl%3Den-GB%26action_handle_signin%3Dtrue%26app%3Ddesktop&hl=en-GB&uilel=3&service=youtube#identifier

where it is now &continue=https%3A%2F%2Fwww.youtube.com%2Fsignin%3Ffeature%3Dsign_in_button%26next%3D%252F%26hl%3Den-GB%26action_handle_signin%3Dtrue%26app%3Ddesktop

If I was setting up a Login item what I would do is set up my Google one and then add the YouTube URL as a second website field. I'm not entirely sure if this is what you've done or not so you'll be able to help clarify that for me. If I were to visit either URL the Google Login item would show as being a match for filling purposes and if you were to click on an individual URL then open and fill should work. The one place you would notice a possible inconvenience is if you normally search for an item in 1Password mini and simply select the item to use open and fill. As you're not specifying a URL it would always default to the first one.

Facebook I'm unsure of even less than thightower although I found his link informative. It almost seems like you would need to keep a Facebook Login item for it's own username and password but after you've linked it to Google you could simply add the Facebook URL as a third website field to your Google Login item.

Normally I like to thoroughly test this stuff before reporting back but despite years of being grumbled at I still won't create a Facebook account and would prefer not to still (sorry).

Hopefully something here works for you though :smile: and if not please tell us a little more about your current set up.

JoyceC

That's pretty much what I have done. I don't sign in places "with Facebook" but since FB and YouTube are linked through Google, I have put them as separate websites under the accounts.google 1PW login setting. I was wondering about changing passwords as 1PW has been giving me a warning but I ended up just doing as above.

littlebobbytables

Hello @JoyceC,

So you're pretty much doing what I was thinking so does this mean that when you said

Of course gmail worked fine but I had to change the FB and YouTube passwords on those sites. And YouTube and Accounts are two-step processes so when I do try the Open and Fill it just opens YouTube, opens and fills the e-mail address on Accounts so I have to do the copy/paste routine for the next pages. FB at least has both on the same screen. Did this make sense?

in your previous post this would indicate that we still have troubleshooting needing done to figure out what is going on?

I'm surprised by YouTube just because if logging into Google worked then YouTube should do as well as both are definitely using the same domain to log in (https://accounts.google.com). FaceBook is a bit harder as I'm still not 100% sure what you normally would do there.

A quick tip for the 2 page login process that Google uses these days. You can use open and fill to have 1Password open a new tab in your browser, load the URL and fill that page. After 1Password has submitted and you're moved to the second page that requires your password if you use the ⌘\ keyboard shortcut it will fill the password for you rather than requiring you to use copy and paste.

JoyceC

Nope, just changing the accounts.google password didn't change the others. Which is really the way I like it.

AH! didn't know about ⌘\ Thanks for that.

littlebobbytables

I have to confess that confuses me @JoyceC, at least for the YouTube site anyway.

So you've got a single accounts.google Login item and in it you store your google email address as the username and your google password in the password field and then you have multiple website fields. The first is possibly

https://accounts.google.com/ServiceLogin?service=mail&passive=true&rm=false&continue=https://mail.google.com/mail/&ss=1&scc=1&ltmpl=default&ltmplcache=2&emr=1&osid=1#identifier which would allow for open and fill to access your gmail.

Then for any additional ones what do you have? do you have one that looks like

https://accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Fsignin%3Ffeature%3Dsign_in_button%26next%3D%252F%26hl%3Den-GB%26action_handle_signin%3Dtrue%26app%3Ddesktop&hl=en-GB&uilel=3&service=youtube#identifier

which if it worked should log you into YouTube. I'll have to see if somebody can replicate your findings as really a change to this Login item should work equally as well for both Google and YouTube. Very puzzling indeed.

JoyceC

Nope. Now, I noticed that the change to google mail did not change in 1PW; I changed it manually just now. but the CMD-\ worked like a charm. Here's a screen shot of the entry. Notice that the only one to have the /ServiceLogin directory is the first, accounts.google, website. But as I say, FaceBook has the name and password boxes on the cover page so both are filled in anyway.

thightower

@JoyceC

I didn't know if the screenshot you posted was in fact personal so I took the liberty and removed it, cropped out the email address, and reattached it. Just trying to keep your email private.

Mainly just letting you know, in case you look and say, thats not what I posted! :)

JoyceC

No problem; I hardly ever look at gmail so I didn't bother deleting it but thank you for doing it for me.

littlebobbytables

Hi @JoyceC,

So I would recommend changing the website field that is currently points to http://youtube.com to https://accounts.google.com/ServiceLogin?uilel=3&service=youtube&continue=https://www.youtube.com/signin?feature=sign_in_button&hl=en-GB&app=desktop&next=%2Fwatch%3Fv%3Df0NnEDsPErM&action_handle_signin=true&passive=true&hl=en-GB#identifier

as that's the actual login page for youtube.com or it's what I get sent to anyway.

As far as I can tell, when it comes to Facebook you actually log into your Google account and then when you visit Facebook you're simply logged in, according to the page thightower found which would mean you shouldn't need to have that entry for Facebook there. I could be wrong but I don't think there is a way to go to the Facebook homepage and click a link that sends you to Google to authenticate with them.

It might be you need to maintain a separate Facebook Login item given that whatever weird agreement they have with Google you still do keep a Facebook username and password.

Hopefully this helps clarify things but we'll see :smile:

JoyceC

Nope -- I copied/pasted this in and while it opens the login screen and fills in the username, I still have to go to the next screen and paste the password in. I'm happy knowing I can just CMD-\ in the password.

littlebobbytables

Hi @JoyceC,

I think we might have narrow down on part of the issue :smile:

1Password will only fill when instructed and it will only fill a single page. For multi-page logins such as Google this does mean instructing 1Password to fill the first page and then you will have to instruct 1Password to fill the second too. So for example if you manually visit Google's login page you would need to use the ⌘\ keyboard shortcut twice to log in. You don't often see this kind of approach outside of banks and other financial companies though so I can't think of another good example right now of a commonly used site that does this. We have a page on this which can be found at Using 1Password with login sequences split across multiple pages.

Does that snippet of information help at all?

JoyceC

That's what I figured; I'm just as happy filling in manually.

It appears banks are changing back from the two-page sign-ins. At least mine are.

littlebobbytables

Greetings @JoyceC,

It's nice to hear some banks are realising weird security practices may not be making their customers more secure :smile:

It sounds like we've reached a point where you're informed and happy with how 1Password is working. If this isn't the case please do say and we'll continue working with you, otherwise I hope 1Password runs smoothy for you :smile:

JoyceC

Nope, no problem. I'm sure there's somewhere the keyboard shortcuts are listed, I just have to find it. That CTL-\ is snazzy. Been a keyboarder since cp/m - DOS - OS/2 days.

littlebobbytables

We do list the keyboard shortcuts and for 1Password for Mac that list can be found at Keyboard shortcuts. I confess I do use some of them a lot. I like the ⌥⌘\ for opening up 1Password mini without it automatically trying to fill, I find the ⌘O useful for anchoring an item from the 1Password mini view and because of the work we tend to do here I use ⌘E and ⌘S to edit and save items a lot but that's just my usage. I hope you find that page useful :smile: