O'Reilly logo

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Take Control of 1Password, 3rd Edition

Book Description

Easily create and enter secure passwords on all your devices!

Wrangling your web passwords can be easy and secure, thanks to 1Password, the popular password manager from AgileBits. In this book, Joe Kissell brings years of real-world 1Password experience into play to explain not only how to create, edit, and enter web login data easily, but also how to autofill contact and credit card info when shopping online, audit your passwords and generate better ones, handle two-factor authentication (2FA), and sync and share passwords in various ways--including a hosted 1Password account (individual, family, or team), iCloud or Dropbox.

While reading Take Control of 1Password on my iPad I was furiously highlighting passages and following along with 1Password open on my Mac. [The book] showed me how some of my passwords were weak or duplicates. I immediately changed those passwords to unique and secure ones.
--Elisa Pacelli, in her MyMac book review (2nd Edition).

The book focuses on 1Password 6 for the Mac, but it also provides details and directions for the iOS, Windows, and Android versions of 1Password. It briefly covers 1Password X, a chrome extension that brings 1Password to Chrome OS and Linux.

Topics include:

Meet 1Password: Set your master password, explore the various 1Password components, and decide on your ideal usage strategy.

Master logins: In 1Password, a typical login contains a set of credentials used to sign in to a website. Find out how to create logins, sort them, search them, tag them, and more. You'll also find help with editing logins--for example, changing a password or adding further details.

Understand password security: Get guidance on what makes for a good password, and read Joe's important Password Dos and Don'ts. A special topic covers how to perform a security audit in order to improve poor passwords quickly.

Go beyond web logins: A primary point of 1Password is to speed up web logins, but 1Password can also store and autofill contact information (for more than one identity, even), along with credit card information. You'll also find advice on storing passwords for password-protected files and encrypted disk images, plus ideas for keeping track of confidential files, software licenses, scans of important cards or documents, and more.

Sync your passwords: Discover which 1Password syncing solution is right for you: a hosted 1Password account, Dropbox, iCloud, a manually synced folder, or even device-to-device Wi-Fi sync.

Share your passwords: Learn to store passwords in shared vaults within a family or team hosted account.

You'll also discover the answers to key questions, including:

  • What are my options for licensing 1Password?
  • What are the differences between vaults in 1Password accounts and standalone vaults?
  • Should I keep using my web browser's autofill feature?
  • What about iCloud Keychain? Should I use that too?
  • What can I do quickly to get better password security?
  • How can I find and update weak passwords I created long ago?
  • What should I do about security questions, like the name of my pet?
  • How can 1Password provide a time-based one-time password (TOTP)?
  • How do I use 1Password logins from utilities like LaunchBar?

Table of Contents

  1. Read Me First
    1. Updates and More
    2. Basics
    3. What’s New in the Third Edition
  2. Introduction
  3. Passwords Quick Start
  4. Understand the Problems with Passwords
    1. Simple for You, Simple for Them
    2. The One and the Many
    3. The Major Threats
    4. Timeworn Tricks
    5. Usernames and Passwords: an Outdated Model
  5. Learn About Password Security
    1. What Makes a Good Password?
    2. All About Entropy
    3. Why a Great Password Isn’t Enough
    4. Understanding Security Questions and Reset Procedures
    5. Multi-Factor Authentication
    6. Authenticating with Another Site’s Credentials
  6. Apply Joe’s Password Strategy
    1. Figure Out Which Passwords You Must Memorize
    2. Create Strong but Memorable Passwords
    3. Use a Password Manager for Everything Else
    4. Handle Security Questions
    5. Manage Email Options
    6. Deal with Exceptions and Surprises
  7. Pick a Password Manager
    1. Features to Look For
    2. Example Password Managers
    3. Joe’s Recommendations
  8. Keep Your Passwords Secure
    1. Avoid the “Weakest Link” Problem
    2. Use Wireless Networks Safely
    3. Back Up Your Passwords
    4. Prepare an Emergency Password Plan
  9. Audit Your Passwords
    1. Understand the Overall Process
    2. Look for Weak Passwords
    3. Triage Your Passwords
    4. Update a Password
  10. Appendix A: Use Two-Factor Authentication
    1. Two-Step Verification Basics
    2. Use Apple’s Enhanced Security Options
    3. Use Dropbox’s Two-Step Verification
    4. Use Facebook’s Two-Step Verification
    5. Use Google’s Two-Step Verification
    6. Use Microsoft’s Two-Step Verification
    7. Use Twitter’s Two-Step Verification
  11. Appendix B: Help Your Uncle with His Passwords
    1. Password Manager Compromises
    2. Password Reuse Compromises
    3. Password Complexity Compromises
  12. Appendix C: Calculate Password Strength
    1. The Entropy Formula
    2. An Aside: Doing Math with Google
    3. Why That Entropy Formula Is Wrong
    4. Back to zxcvbn
    5. Password Strength Summary
    6. For Further Reading
  13. About This Book
    1. Ebook Extras
    2. About the Author and Publisher
    3. Credits
  14. Also by Joe Kissell
  15. Copyright and Fine Print