When a 1Password person clicks a hyperlink and opens an internet site with a URL that doesn’t match the one they’ve saved alongside login particulars, the 1Password browser extension will do two issues. It gained’t autofill their login credentials, and it’ll show a pop-up warning explaining that the present web site’s URL “isn’t linked to a login in 1Password.”
The characteristic isn’t a foolproof method to cease phishing assaults from succeeding. Customers can nonetheless select to manually copy and paste their credentials right into a suspicious web site. However it should make them conscious that they’re probably coping with a phishing rip-off with the hope that they’ll assume twice and train extra warning earlier than continuing.
The brand new phishing prevention characteristic is being rolled out to customers beginning at this time, however it might take a number of weeks for it to be accessible to everybody. For particular person and household plan customers, 1Password is enabling this characteristic by default as soon as it’s accessible. For companies it should have to be manually enabled by 1Password Admins.