1Password 4 and Quicksilver

[Patrick Robertson]

Today Agile Bits has released 1Password 4, the latest update to their 1Password product.
The good news for any Quicksilver-1Password users is that the current 1Password plugin will work just fine! (read on to learn more)

With the release of 1Password 4, the Agile Bits guys have altered the format in which 1Password data is stored ( http://learn.agilebits.com/1Password4/Security/1P4-security-changes.html ). Unlike the old "Agile Keychain" format, this new format is incompatible with Quicksilver's 1Password plugin (all the data is encrypted, so Quicksilver has no way of reading any of the information).
If, however, you are upgrading from 1Password 3, 1Password 4 will automatically keep the old "Agile Keychain" format file synced and up to date, meaning Quicksilver can continue to interface with 1Password seamlessly.
If you're new to 1Password 4 and would like to use the Quicksilver plugin with 1Password, you will need to export or sync your AgileKeychain to a folder. This can be done in the 1Password preferences. Go to Preferences > Sync and enable Dropbox support

We are working on fully supporting 1Password 4 (without the need to export the "Agile Keychain" format), and once complete, it will require you to "Enable integration with 3rd party Apps", which can be checked from the "Advanced" pane of the 1Password preferences.

One final security feature 1Password 4 contains is an option for 3rd party apps (such as Quicksilver's Clipboard plugin) to completely ignore any data copied from 1Password (transient pasteboard type). We already have support for ignoring apps from the Clipboard plugin preferences (ignoring data copied from 1Password is enabled by default), but this does not ignore data copied within Browser extensions. With the next release of Quicksilver we will be sure to implement this so that sensitive 1Password data is not copied to the clipboard.

For the time being, happy Quicksilvering!

References:
1P4 security changes: http://learn.agilebits.com/1Password4/Security/1P4-security-changes.html
1P4 3rd Party app discussion: http://discussions.agilebits.com/discussion/13481/alfred-1password-bookmarks-and-1password-4
Previous 1P4 Quicksilver discussion: https://groups.google.com/forum/#!topic/blacktree-quicksilver/ooqRkaFFSLQ
1P4 Transient pasteboard: http://discussions.agilebits.com/discussion/15157/clipboard-manager-copypastepro-doesn-t-copy-after-recent-1password4-beta-update

[Tim Lawson]

Thanks Patrick.  FWIW, I've posted a note to the AB devs here...

--
You received this message because you are subscribed to the Google Groups "Quicksilver" group.
To unsubscribe from this group and stop receiving emails from it, send an email to blacktree-quicks...@googlegroups.com.
To post to this group, send email to blacktree-...@googlegroups.com.
Visit this group at http://groups.google.com/group/blacktree-quicksilver.
For more options, visit https://groups.google.com/groups/opt_out.

[Dan Davie]

Hi All.   Really am hoping for some help.

I am running Mavericks on my 13 inch MacBook Pro and have recently installed both one password and Quicksilver. I am a long-time user of both, and have not changed anything in my set up, but ever since one password for came out it seems that Quicksilver cannot see any logins that it could before. I have the latest beta build of one password and the latest build the one password plug-in for Quicksilver. 

Does anyone have ideas? I am synchronizing to dropbox which of course keeps a local agile keychain file. 

Any help would be greatly appreciated!

[Patrick Robertson]

1Password 4 stores its information in a different way (everything is entirely encrypted). You need to make sure you are exporting your data in a format that Quicksilver can read. To do this go to the 1Password prefs, click ‘advanced’, and then tick ‘Enable integration with third party apps’.

Once done, Quicksilver should be able to index the field from your Dropbox folder, unless it is in a non-default location:

At the moment the plugin has no way of asking 1Password where the Keychain file is stored, so it looks in the following locations:

"~/Library/Application Support/1Password/1Password.agilekeychain"

"~/Library/Containers/com.agilebits.onepassword-osx-helper/Data/Documents/1Password.agilekeychain"

"~/Dropbox/1Password/1Password.agilekeychain"

"~/Dropbox/1Password.agilekeychain”

If it’s not there, then QS has no way of finding it.

[Dan]

I LOVE you, man!  If i had a beer, I would be handing it to you and then going to the store to buy you a six-pack!

thank you so much for your help (and quick too!)

Dan

You received this message because you are subscribed to a topic in the Google Groups "Quicksilver" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/blacktree-quicksilver/vuHZtyspRI0/unsubscribe.
To unsubscribe from this group and all its topics, send an email to blacktree-quicks...@googlegroups.com.

[Patrick Robertson]

Hehe, thanks ;-)

[Rob McBroom]

On 25 Jan 2014, at 20:17, Patrick Robertson wrote:

"~/Library/Application Support/1Password/1Password.agilekeychain"
"~/Library/Containers/com.agilebits.onepassword-osx-helper/Data/Documents/1Password.agilekeychain"
"~/Dropbox/1Password/1Password.agilekeychain"
"~/Dropbox/1Password.agilekeychain”

For me, it’s now ~/Library/Application Support/1Password 4/3rd Party Integration/bookmarks-default.json.

--
Rob McBroom
http://www.skurfer.com/

[Patrick Robertson]

Strange, I can’t see that one anywhere. Do you have the non-Mac App Store version?

I think since I upgraded from 1P3 everything is still stored fine in the original .agilekeychain file - was 1P4 your first version?

Anyway, you can see how fiddly finding all the paths are. Does the plugin work though? If it does it’s because that path is stored in the prefs under ‘AgileKeychainLocation’

If not let me know/create an issue and I’ll add that path as another fallback

[Dan]

Thanks all.  Mine is working perfectly now.  I had moved the .agilekeychain file to a non-standard spot in my dropbox folder - that was the only problem.

You received this message because you are subscribed to a topic in the Google Groups "Quicksilver" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/blacktree-quicksilver/vuHZtyspRI0/unsubscribe.
To unsubscribe from this group and all its topics, send an email to blacktree-quicks...@googlegroups.com.

[Leveebreaks]

Some observations:

If you use Dropbox sync, the old data format (.agilekeychain) is used. The new format (.opvault) where everything is encrypted, is only used for iCloud sync at the moment. This is the case even if you have never used 1Password 3. The reason is that the Android and Windows versions have to catch up.

I can verify that Quicksilver finds my 1Password items, even if I have not enabled the "3rd party option" in 1Password's preferences. I have the website version of 1Password 4. I have my 1Password keychain located in ~/Dropbox/1Password.agilekeychain

Some issues though: the Quicksilver plugins uses the old-style categories. 1Password 4 streamlines the categories, there is no longer Wallet or Account categories with sub-categories. Instead it's only one level of categories. The plugin doesn't find my "Wallet" items. Also, the "Reveal in 1Password" action doesn't seem to work. My 1Password items shows no icon, only a question mark.

Quicksilver 1.2.0 (4008

Quicksilver 1Password plugin 2.6.3

1Password 4.1.3

OS X 10.8.5

[Rob McBroom]

On 27 Jan 2014, at 7:27, Leveebreaks wrote:

I can verify that Quicksilver finds my 1Password items, even if I have not
enabled the "3rd party option" in 1Password's preferences. I have the
website version of 1Password 4. I have my 1Password keychain located
in ~/Dropbox/1Password.agilekeychain

I thought it was working at first too, but it’s more likely that what you see in Quicksilver is coming from ~/Library/Application Support/1Password because it isn’t deleted when you install 1Password 4. Before long, it’s going to be out of date because 1Password is no longer writing to that location. It moved everything to ~/Library/Application Support/1Password 4 and is only using that now.

Delete the old folder and you’ll see what I mean. (1Password 4 will continue to work, but Quicksilver won’t see anything.)

Some issues though: the Quicksilver plugins uses the old-style categories.
1Password 4 streamlines the categories, there is no longer Wallet or
Account categories with sub-categories. Instead it's only one level of
categories. The plugin doesn't find my "Wallet" items. Also, the "Reveal in
1Password" action doesn't seem to work. My 1Password items shows no icon,
only a question mark.

All further evidence for what I suspect above. :-)

[Rob McBroom]

On 26 Jan 2014, at 20:29, Patrick Robertson wrote:

Strange, I can’t see that one anywhere. Do you have the non-Mac App Store version?

Yeah, I’m pretty sure it’s not the App Store version.

I think since I upgraded from 1P3 everything is still stored fine in the original .agilekeychain file - was 1P4 your first version?

I upgraded from 3.

The .agilekeychain might still be there, but is that old location ever updated by version 4? Or is it just left-over? (See my other post.)

Anyway, you can see how fiddly finding all the paths are. Does the plugin work though? If it does it’s because that path is stored in the prefs under ‘AgileKeychainLocation’
If not let me know/create an issue and I’ll add that path as another fallback

If the old .agilekeychain files were just JSON, I assume it can be fixed temporarily with a symlink.

If you’re unable to test/verify any of this, let me know and I’ll try to put together a pull request.

[Leveebreaks]

I have deleted the following folders: 

~/Library/Application Support/1Password.

~/Library/Caches/Quicksilver

~/Library/Caches/com.blacktree.Quicksilver

I restarted Quicksilver. My 1Password items still show up in Quicksilver's catalog and can be filled. 1Password still writes to ~/Dropbox/1Password.agilekeychain, and that file (bundle) hasn't changed since 1Password 3.

EDIT: If I create a new 1Password login, it shows upp in the Quicksilver catalog and gets filled correctly.

[Rob McBroom]

On 27 Jan 2014, at 9:56, Leveebreaks wrote:

> I restarted Quicksilver. My 1Password items still show up in
> Quicksilver's catalog and can be filled. 1Password still writes
> to ~/Dropbox/1Password.agilekeychain, and that file (bundle) hasn't
> changed since 1Password 3.

Oh, OK. Must be the Dropbox sync (which I don’t use) that keeps it
working for you. I could probably configure it to sync with the old
location, but I’d rather just fix the plug-in.

[Peter]

It's not the cleanest method, but I noticed it's possible to specify a .agilekeychain file location that differs from those listed.  The plugin checks the ws.agile.1Password preferences domain for the file location.  To set up the preference, perform a terminal command similar to this one (my keychain happened to be pretty deep in the dropbox folder):

defaults write ws.agile.1Password AgileKeychainLocation "~/Dropbox/Your/Preferred/Path/1Password/keychainname.agilekeychain"

Hope this is helpful as an interim solution.

[José Luis Gordillo]

HI,

I checked that dropbox sync works properly, and that old 1Passwdord stuff is removed, and I can find 1P new items from QS, but "reveal in 1passwd" action still doesn't work. Any suggestions?

El lunes, 27 de enero de 2014 08:56:00 UTC-6, Leveebreaks escribió:

I have deleted the following folders: 

~/Library/Application Support/1Password.

~/Library/Caches/Quicksilver

~/Library/Caches/com.blacktree.Quicksilver

I restarted Quicksilver. My 1Password items still show up in Quicksilver's catalog and can be filled. 1Password still writes to ~/Dropbox/1Password.agilekeychain, and that file (bundle) hasn't changed since 1Password 3.

EDIT: If I create a new 1Password login, it shows upp in the Quicksilver catalog and gets filled correctly.

Den måndagen den 27:e januari 2014 kl. 15:35:15 UTC+1 skrev Rob McBroom:

[Patrick Robertson]

Unfortunately the ‘Reveal in 1Password’ action is effectively crippled, since the 1Password guys have remove this ability.

I will get in touch with them to see if there’s any other way of doing this.

--
You received this message because you are subscribed to the Google Groups "Quicksilver" group.
To unsubscribe from this group and stop receiving emails from it, send an email to blacktree-quicks...@googlegroups.com.
To post to this group, send email to blacktree-...@googlegroups.com.
Visit this group at http://groups.google.com/group/blacktree-quicksilver.

For more options, visit https://groups.google.com/d/optout.

[Leveebreaks]

Not really related to QS, but anyway; It's now possible to switch to the more secure .opvault format for Dropbox syncing. This is how you do it:

(you might destroy 1Password or your computer)

1. Disable sync on all your devices that syncs 1Password data.

2. Remove 1Password.agilekeychain from your Dropbox folder

2. Enable iCloud sync in 1Password

3. Go to ~/Library/Mobile Documents/2BUA8C4S2C~com~agilebits~onepassword and copy a folder called onepassword_data (or something similar) to another folder, I suggest the desktop. Rename the folder 1Password.opvault. Now the folder is a bundle and gets a nice icon.

4. Put 1Password.opvault in your Dropbox.

5. Go into 1Password sync settings and enable Dropbox sync, and point it to the 1Password.opvault. Do so for every client that has 1Password installed. The opvault format is working on OS X, iOS and Windows, but not Android.

6. ???

Now you're using the more secure format, that's also better in other ways. For example, it uses fewer files (a fixed number instead of 1 file for every item in 1Password).

Because titles and URLs are encrypted in opvault, Quicksilver won't see the items. Personally, I haven't really felt the need for accessing my 1Password data in Quicksilver after the improvements made to 1Password's own search.

[Matthew Davis]

I had been hoping that an update to the plugin would fix my missing 1Password icon, but like Leveebreaks, mine is missing (since the move to 1P 4). See screenshot:

https://www.dropbox.com/s/me9wzkcbmibhgyd/Screenshot%202014-10-01%2007.28.45.png?dl=0

QS 400E

Plugin 2.7.0

1Password 4.4.1

[Patrick Robertson]

Could you please let me know if you downloaded 1P from the App Store or externally? If it was externally, I’d need to know the bundle ID of 1Password.

You can get this by finding 1Password.app, right clicking and selecting ‘show package contents’ then looking in the file called Info.plist inside ‘contents’ and finding the CFBundleIdentifier key.

[Matthew Davis]

Externally. 

<key>CFBundleIdentifier</key>

<string>com.agilebits.onepassword4</string>