1Password for Mac. by Marcia Bolsinga for AshMUG 1/12/2019

Transcription

1

2 Why do we need passwords? First of all - why passwords? Passwords are one of the Primary Pain Points in our modern digital existence. Despite all the advances of our modern technology, we haven t managed to come up with a digital equivalent of the driver s license. With a driver s license, I can walk into any liquor store in the United States and prove that I m old enough to drink. But on the internet, no one knows if I m a dog, or even if I m a living being. So far, the best tool for online verification we have is the password. I prove who I am by recalling my precise, unique combination of letters, characters, and numbers. I m supposed to be the only one who knows that precise combination of letters and numbers, so I m the only one who can be me. Quote (with my edits) from Robert McKinley Meyers on The Sweet Setup

3 Why Passwords? So, not only do we need great passwords, but we need to keep changing them because they keep slipping our grasp. Yet, security on the Internet is dependent on one single fail point: the human brain. Most people try to rely on remembering their passwords, and most people fail at it.

4 How do we manage passwords? Some methods for remembering your passwords can lead to terrible things. The first is using the same password for numerous services, which, of course, is incredibly unsafe. If one account is taken over, it can be just a matter of time that others are too. The second predicament people end up in is slightly better, but not by much. These users may have different passwords for different accounts, but they re all stashed on sticky notes or in a paper notebook. And writing down the passwords on a piece of paper will make you less likely to use the kind of complicated, highly secure passwords most security experts recommend. Even if you save them somewhere, you still have to type them in, and who can remember that random stream of letters, numbers and characters. And what if you lose that notebook?

5 Overview 1Password is not the only Password Management tool out there - it s what I use, and what I m presenting today. Apple has its built-in Keychain. I haven t done much research on it, but I believe it provides fewer features than 1Password. But it s free! And it has become more robust over the years. 1Password is a password manager, an app you install on your Mac, iphone, and/or ipad to store all your various passwords. It is a great solution to easily keeping all your various passwords secure. 1Password helps you create great, complex passwords for all your important sites, and also stores all of your user names and passwords, whether they re great and complex, or your Aunt Patsy s maiden name. You don t have to use the password generator; only if you want to. 1Password allows you to enter those usernames and passwords in a website s sign-in area, without remembering them, or typing them in. All you need to remember is your Master Password. On a device where TouchID is enabled, you can set up 1Password to use TouchID instead of the Master Password. I understand that on devices where FaceID is enabled, you can use that instead of your Master Password. But based on how well (?) Apple Photo recognizes faces, I m a little hesitant to go that route. 1Password can also help you with passwords for apps on your ios devices, not just those items you access on Safari (or other browsers). 1Password also works on PCs, and Android devices.

6 Overview 1Password doesn t only help you safely keep track of login credentials, it can also be used for many other items of importance. You can even scan documents and add them to one of your items. Passwords for non-web purposes (ex: your garage door code) Credit Cards - one click will fill in credit card info on a website Secure Notes - any thing you create on a Note that you want to be secured Identities - keep profiles of your home or life information, which can be filled in on forms Passports - secure passport info for when you travel Rewards Programs Software Licenses etc., etc.

7 Overview How it works on your Mac Installation and Setup You install 1Password on your Mac You create your Master Password You install the Safari extension for 1Password Mini to run when you are using Safari Similar set ups for other browsers You enable 1Password Mini to run on your Mac for non-safari needs, available on your menu bar Best use - sync 1Password using Dropbox, icloud or 1Password (when using Membership option) so all your passwords are available on other devices Set up one or more Vaults Vaults are collections of items that you have grouped together. Think of them as folders under the major heading of 1Password. You can set up vaults for individual users, types of accounts, whatever you define. Or you can stick with the default primary vault. Each vault will have its own Master Password. Unless there s a reason to do otherwise, I recommend using the same Master Password for all vaults. I recommend turning off Apple s Keychain so you don t get multiple requests to save a password. This can get confusing. (See appendix B for how to do this)

8 Overview How it works on your Mac (cont d) 1Password Preferences - not all, but important ones to look at General Keep 1Password Mini running Show mini app icon in the menu bar Security Conceal, and auto-lock settings Conceal passwords means they won t be visible when you open the 1Password app or mini. You can click on the pulldown to revel them, if desired. Set to lock after a set time Set to clear clipboard contents after a set time (if you copy your passwords, they won t stay in your clipboard too long.) Sync You can sync to Dropbox, icloud, or 1Password account

9 Overview How it works on your Mac (cont d.) Some Important things to keep in mind: You don t have to use the generated passwords; you can continue to use your familiar passwords, and just store them for use in 1Password. My take - take advantage of generated passwords for your really important items, like bank websites. Things like Pinterest - not so much. When you first use 1Password, you don t have to manually add all your passwords to 1Password. As you access your websites, you can add them as you go along. However, if you want to get it over with, you can enter them all manually using the 1Password full-blown app. Remember, if you re going to change a password, always do it on the website, and then save in 1Password. 1Password will not update the password on the website. When you choose to save or update a password in 1Password, you are only impacting 1Password, not your website account.

10 Demo

11 1Password Demo This is what the full-blown app looks like on your Mac (will look much larger) You will enter your Master Password to enter your Vault This version of the app is good for editing, managing, and adding new items that have not been added via Safari. View of a Demo Vault in 1Password

12 1Password Demo 1Password Mini Accessible in Safari (or other browsers) via the extension you installed. Click on 1Password icon. After entering Master Password, will open to info for website you are currently pointing to (in this case, Apple) 1Password Mini is also accessible in Menu Bar via setting in 1Password Preferences

13 1Password Demo Usage on Safari When registering an account at a new website, when you get to the website s screen for entering a password, you can use the 1Password app to generate a password, or you can type in your own password. 1Password will ask if you want to save the login to 1Password. You can then save it, leaving the default title, or editing the title for better recognition on your part. 1Password then saves the username and login into your Vault as (for example) cabelas.com, with the appropriate url.

14 1Password Demo You can t see it, but I entered /wp-admin in Safari Usage on Safari When accessing a website where you have an existing username and password, and an existing 1Password item, you can use 1Password mini in Safari to fill in the appropriate username and password. Once you have 1Password established, this will be your most common usage.

15 1Password Demo Usage on Safari The first time you access a website where you have an existing username and password, but no 1Password item (such as when you first start using 1Password) 1Password will ask if you want to save it. Save it.

16 1Password Demo Usage on Safari If, while on a website, you change your password, 1Password will ask you if you want to replace the existing password with new one, or create a new item in 1Password. In this case, you would probably want to choose Update Existing, unless you were creating a new account in 1800contacts.com

17 1Password Demo Using in Safari: Accessing 1Password Mini in Safari 1 Apple website; 2 Apple login 2 1 Two ways I ve seen it used: First go to a website (type it in or use bookmark to go to the website url). Open 1Password, using the 1Password icon in the Safari menu bar, enter your Master Password, and it will show the appropriate login for that website. Click on it to autofill. Chose item from list Or First go to 1Password icon on Safari menu bar, enter your Master Password, scroll down the list to the website you want, and click on that to get to the signin page and to auto-fill.

18 1Password for ios Overview How it works on your ios device (iphone or ipad) Installation and Setup Install 1Password ios app on your iphone or ipad (iphone App store) In Settings, enable Cellular Data for 1Password app Be sure you have set up 1Password on your Mac to sync somewhere When you install it, you will be asked if you already use 1Password, with the options of choosing 1Password s Membership, icloud or Dropbox. Enter your Master Password, and it will download your items to your ios device. On a device where TouchID is enabled, you can set up 1Password to use TouchID instead of the Master Password. Note: If you re only using 1Password on an ios device, you won t need to sync. You will create and enter passwords on your ios device.

19 1Password for ios Overview How it works on your ios device (cont d) In ios Safari, when you go to a website that is not set up to use 1Password, use the Share Icon to open sharing options. You will see 1Password as an option. Click on that, and use your Master Password to open the app, using it as you would on your Mac. In an ios app, when prompted to enter a username, you will see a prompt to use 1Password at the top of the keyboard. It may show a suggested password, or it may show only the word Password and a Key. Use your Master Password to open the app and proceed as you would on your Mac. In Safari, websites that are set up to use 1Password will work the same as an ios app. The ios version of 1Password will lock as soon as you exit it, as a security measure, since iphones and ipads are more susceptible to theft or loss.

20 Purchase Options Like a number of software companies, 1Password has been moving from a standalone license for their product, to a subscription, or as they call it, a membership. That said, you can still purchase a standalone license. IMO, they are making it more difficult to simply purchase or upgrade your standalone license. It can take a lot of digging to find any info on downloading the standalone version. Based on various things I ve read on their website, they will continue to offer the standalone version, but they definitely recommend going to the subscription version. It seems that the basic app is the same whichever option you choose. There are some additional benefits to the membership option. I ll give you some info on each option. This way you can make a decision which way to go.

21 Purchase Options Standalone License Current version for Mac is 7, introduced in May cost $ no discount for upgrading from an earlier version. You cannot buy it from the Apple App Store; you will need to go to You will pay for any major upgrades. Licenses are per-person, per-platform (Mac or Windows) so you can use your single license on as many Macs as you have. Data is saved on your Mac, and you can also sync it to icloud or Dropbox, which is a way of sharing your 1Password data with another device, and having an additional copy of your data. My take - syncing through icloud or Dropbox allows you and your spouse to share one set of passwords - great if you don t have a lot of passwords unique to an individual. You can set up separate vaults. 1Password for ios is free, so if you sync your data, you can use it on both your Macs and any ios devices. 1Password for Android is also free, so you can use it if you have a Mac, and an Android phone. If you store your data only on your Mac (no syncing), it is imperative that you have a very reliable backup plan.

22 Purchase Options Subscription Option - 1Password Membership Current Mac version is 7, same as standalone license. Single Membership cost is $2.99 a month when billed annually. One account, can be used on all of your Apple devices Family Membership cost is $4.99 a month when billed annually. A family membership allows you to have multiple individual accounts (up to 5) that can be shared and controlled through a single account. Additional members can be added for $1 per month. My take - good for families that will have a great variety of passwords per person, and for managing children s accounts. You get all future upgrades to 1Password at no extra cost. If you purchase a membership, you will receive a 1Password Emergency Kit, containing your Secret Key. It is important that you keep a copy of this somewhere safe (safe deposit box), as this is not kept by 1Password. It will be important in securing your data, and restoring your 1Password membership account, if needed. Primary Difference - your data is stored in 1Password s servers. This enables you to access your 1Password from any device without syncing. 1Password also backs up your data on their servers. Data is also cached on your device, so if you don t have an internet connection, you can still access 1Password. 1Password states that this is their primary reason for offering the membership - they have control over the syncing and backing up of your data; they don t have to rely on third parties. 1Password states that your data is more secure on their servers, because of their security model. In addition to your Master Password, your data is secured using a 128 bit Secret Key. There are a few more features available via the membership. One example is Travel Mode, by which you can keep only those passwords needed for travel on your device. Others are removed (and saved) on 1Password s servers.

23 More Reading - Appendix A Getting Started with 1Password on a Mac: 1Password Glossary: Good article on Passwords and 1Password: Upgrading 1Password: 1Password Membership: 1Password Security Model: 1Password Sync Options: Creating a better Master Password: 1Password Travel Mode:

24 Disabling Keychain - Appendix B How to turn off Apple Keychain In Safari Preferences/Auto Fill, uncheck Auto Fill Web Forms: User Names and Passwords In Safari Preferences/Passwords, uncheck Auto Fill User Names and Passwords If you had icloud Keychain turned on for syncing, in System Preferences/iCloud, uncheck the Keychain app.