Jeffrey Goldberg@khad @jpgoldberg the tech is pretty neat, but the most exciting part for me is how we’re starting to put the Emergency Kit behind us. We’re decoupling onboarding from recovery with better (and safer) systems for both.
Mitch Cohen
@mitchchn
- 417 Followers
- 50 Following
- 131 Posts
Principal PM @1Password. Here for the takes. Tech, infosec, gaming, coffee, and whatever else we’re geeking out about today.
@joshrivers Thanks Josh, still reading through your feedback but wanted to quickly let you know that you can limit autofill suggestions to specific hosts/subdomains in 1Password using the settings icon next to the website.
@tobyx Discussed this a little a couple weeks ago: https://mastodon.social/@mitchchn/112572894481333198
@remm Getting recovery codes to production checks a very important blocker off our list of "things that have to exist before you can unlock with a passkey." 😉
@avidrissman @khad @jpgoldberg Yes. Recovery codes are just the first step: now that we have a dedicated system for recovery credentials, we are absolutely going to take on legacy access.
@mitchchn @khad this is really good news. I was always unhappy with the burden that the Secret Key put on users, and the nasty trade-offs we had to make. For a very long time, I had thought those trade-offs were necessary, but I saw a glimmer of hope emerging from the tech that was being developed for new device enrollment.
@khad @jpgoldberg the tech is pretty neat, but the most exciting part for me is how we’re starting to put the Emergency Kit behind us. We’re decoupling onboarding from recovery with better (and safer) systems for both.
@khad A white paper update and an “about the security of…” article are on the way. We’re also discussing the technical details on Reddit: https://www.reddit.com/r/1Password/s/xZM5yBD7n5
@khad I honestly thought of you as soon as I tripped over *that* phrase in the blog post this afternoon. 😳 I sent this message straight away and it will be fixed tomorrow morning.
One of our goals this year is to make 1Password less frustrating and more forgiving, while still upholding our stringent security model. We're taking a step in that direction today with 1Password Recovery Codes:
https://blog.1password.com/introducing-1password-recovery-codes/
https://blog.1password.com/introducing-1password-recovery-codes/
