Getting Started with 1Password

Client Notes

Last week, I helped Garth connect to iCloud and benefit from its syncing services. I also enabled Judy and Carol recover Gmail accounts that stopped working due to storage, and revealed to Ann that a recent iPhone issue begged for equal Mac treatment.

Plus, I led the first of my 3-part 1Password workshop for existing users, many of whom I’ve helped in private sessions to begin using this valuable application. Read all about our accomplishments on the workshop page.

Why 1Password?

I use and recommend 1Password for a few key reasons:

1. As I wrote in Keeping Secrets, it’s never been hacked. Plus, even if it was, your information would still be safe. More on that below…
2. It has a delightful user interface. When I’ve seen competitor LastPass, for example, the interface features a lot of red and gray overtones, which are not very pleasing.
3. It provides templates and shortcuts to easily store and access a range of secrets — not just account logins, but also payment cards, bank accounts, medical IDs, software licenses, and more.

Install 1Password First

1Password provides a thorough Getting Started page with a demonstration of how to begin using the product. I recommend viewing this in its entirety to address initial questions and curiosities.

However, counter to the video, I’ve found the best way forward is to install 1Password on your devices first. Simply visit the company’s download page and click to download for your device.

On Mac, this will save a zip file containing the installer, which you’ll open. On iPhone and iPad, it will lead you to the App Store page to get the app.

Create Your 1Password Account Password

Once you have the app installed, open it, sign up, and create an account. If possible, I recommend doing this on a Mac, which I find more efficient for this step.

When you reach the step to create your account password, you’ll see that the only requirement is at least 10 characters. However, don’t stress. I have a bit of wisdom to help you out:

1. I recommend using a short phrase of three or four words. Think of something that’s meaningful to you but not easily guessed by others. It should also be easy to type on both Mac and mobile devices, as in most cases you’ll need to do so every couple weeks.
2. You can use spaces! (In fact, most account providers allow spaces in passwords.) When you think about it, isn’t it easier to type separate words with spaces in between than to smush words together?
3. Your password should be different from all others in your reality and not be based on a formula you use to generate other passwords.

Master of Your Security

In general, 1Password will be a keeper of all your passwords. Most you’ll be able to easily look up or autofill. However, when feasible, I recommend you memorize about four passwords and not generate these anew with 1Password.

1. Mac password (that you use to log into the computer). Even with Touch ID enabled, you need to enter this periodically.
2. Apple Account password
3. 1Password password
4. iPhone/iPad passcode, whether it’s a 4- or 6-digit number or some other custom alphanumeric password

As outlined in the Getting Started video, the account password you create and a Secret Key generated by your device work together to encrypt your data. The company neither stores nor has access to these. Only if you are part of a Family plan can another member help reset your password and recover your account.

So, be sure to print the provided 1Password Emergency Kit, write your password on it, and keep it in a safe place. You’ll often need these details when signing into a new device, including a web browser.

Import Passwords

After you’ve set up your account, it’s time to fill your vault with your logins. If you previously saved passwords in your browser or on your device, you can export those entries to a text file and import them to 1Password.

There’s a useful middle step, though. I’ve found that password managers like those embedded in Chrome and Safari sometimes save duplicate logins or update existing records with additional websites. Generally, the latter is good behavior. However, when exporting logins, this results in multiple entries for the same account, each with one of the listed URLs.

A future version of 1Password may be capable of directly transferring entries from browser-based password managers. In the meantime, I recommend opening the exported CSV file in your spreadsheet application of choice (e.g., Numbers, Excel, etc.) and deleting duplicates.

You should be able to scan the list and see rows that have the same username and password but a different website. In most cases, as long as you keep the root domain name (e.g., apple.com), you’ll be in good shape after you import into 1Password.

If you don’t have logins saved digitally elsewhere but have written them down, you have a couple best paths forward:

• Create a spreadsheet table with four columns: Title, Username, Password, Website. Transcribe your logins into the table and export the document as a CSV. Import the CSV into 1Password.
• With the 1Password extension installed in your web browser, visit the website of each password, go through the login process, and save the login in 1Password when prompted.