Yubikey Neo support for 1Password?

2»

Comments

  • brentybrenty

    Team Member

    @brenty ...well blow me over and call me windswept. When did you sneak that in?

    @JamesHenderson: Oh. Hmm... Two or three months ago maybe? It's not been super long, just long enough for me to forget when.

    oh hang on; It's only for the first use on a new device though. ...so better than I thought but still not "proper" 2 factor.

    How so? Given that there's no authentication involved in using 1Password otherwise (decrypting and accessing data is 100% local), I'm not sure what you mean. A second factor authentication would inherently only be relevant when there is authentication happening, which of course is when you sign into the account.

  • by "proper" I mean requiring it every time you access the info in the app itself (PC/Mac or Phone or web account)

  • BenBen AWS Team

    Team Member

    There is a catch 22 with that. You can’t have both that and offline access. Offline access has won the argument, for a lot of good reasons, some of which you can read about here:

    https://discussions.agilebits.com/discussion/comment/445466/#Comment_445466

    Ben

  • @Ben that's an interesting read and I appreciate the arguments regarding the local cache - thanks for sharing that link.

    J.

  • brentybrenty

    Team Member

    And just to clarify, 1Password's security is based on encryption, not authentication, so it's not as if your data is insecure because you don't have to "phone home" to a server any time you want to access it. Cheers! :)

  • Voting for Yubikey NFC support on iPhone + 1Password, like Lastpass!

  • brentybrenty

    Team Member

    We don't add features based on "votes", but it is helpful to know that you'd like us to work on that kind of feature. And in case you're not aware, we do already support Yubikey for signing into 1Password.com accounts. Cheers! :)

  • Yeah can we get NFC Yubikey support for 1password? That would be nice, I've got no problem entering the password then touching the key to my phone, but having to be at my computer to be able to authenticate the app on my phone???? Silly, would love to utilize one of the selling points of the yubikey.

  • BenBen AWS Team

    Team Member

    Me too. :) Someday perhaps.

    Ben

  • Another vote for Yubikey and NFC support for 1Password IOS.
    I must admit misunderstood the support for Yubikey in the 1Password documentation.
    I access many services via my iOS devices and have been delighted with the keychain replacment functionality.
    1Password iOS app integration with Yubikey via NFC would be the icing on the cake. I really don't want another dongle I will lose!

  • BenBen AWS Team

    Team Member

    @simonjday

    I really don't want another dongle I will lose!

    I think perhaps you're misunderstanding what is being requested here. I don't believe there is any way 1Password would be able to be a replacement for Yubikey for authenticating via U2F. The whole purpose of U2F is requiring that dongle in order to log in. If you're afraid you'd lose the dongle either don't use U2F or set up a backup dongle. :)

    Ben

  • simonjdaysimonjday
    edited January 28

    By dongle I meant the USB to Lightning adapter not the Yubikey itself. This is the functionality I'm looking for: https://support.yubico.com/support/solutions/articles/15000006425-using-your-yubikey-with-lastpass

  • BenBen AWS Team

    Team Member

    Gotcha. We are on the same page then. I'm not sure we're convinced at this point that there is a real security benefit to such an arrangement for 1Password (it may make infinite sense for how LastPass's system is designed). That said, it is interesting technology, and we are evaluating if / how it may benefit 1Password customers.

    Thanks.

    Ben

  • simonjdaysimonjday
    edited January 29

    @Ben Thinking about it simplistically. Currently if a user has 2FA set up on a 1Password account the 2nd factor may be an authenticator app on an iOS device. The issue is, that iOS device is also where 1Password client app is installed and where passwords are consumed.
    So being able to present a 2nd factor to that iOS device such as Yubikey using NFC would be useful.

  • BenBen AWS Team

    Team Member

    Thanks for the feedback, @simonjday.

    Ben

Leave a Comment

BoldItalicStrikethroughOrdered listUnordered list
Emoji
Image
Align leftAlign centerAlign rightToggle HTML viewToggle full pageToggle lights
Drop image/file