1

The latest 1Password browser update for Firefox includes an authorization between the plugin, and the browser itself. This is documented on the vendors website: https://support.1password.com/browser-authorization/

What threat does this mitigate?

Improve this question
1
  • Looks like a way to ensure the browser extension is indeed from 1Password. A spurious extension would generate a different code.
    – katrix
    Nov 23, 2016 at 16:02

1 Answer 1

Reset to default
1

It's to prevent a second user logged into the same machine simultaneously with you, from asking your open password manager for login credentials by pretending to be a browser extension owned by you. Source: https://discussions.agilebits.com/discussion/70301/background-for-4-6-1-security-changes

This vulnerability was found by Tavis Ormandy of Google's Project Zero team, along with vulnerabilities in multiple other common password managers (some more severe).

Improve this answer
0

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .