惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
人人都是产品经理
人人都是产品经理
IT之家
IT之家
T
The Blog of Author Tim Ferriss
V
V2EX
博客园 - 聂微东
The Cloudflare Blog
Blog — PlanetScale
Blog — PlanetScale
A
About on SuperTechFans
U
Unit 42
Vercel News
Vercel News
L
LangChain Blog
博客园 - 司徒正美
H
Help Net Security
Recent Announcements
Recent Announcements
Recorded Future
Recorded Future
V
Visual Studio Blog
Jina AI
Jina AI
Microsoft Azure Blog
Microsoft Azure Blog
GbyAI
GbyAI
Y
Y Combinator Blog
C
Check Point Blog
博客园 - 三生石上(FineUI控件)
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
J
Java Code Geeks
The Register - Security
The Register - Security
The GitHub Blog
The GitHub Blog
B
Blog RSS Feed
F
Fortinet All Blogs
B
Blog
G
Google Developers Blog
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
云风的 BLOG
云风的 BLOG
爱范儿
爱范儿
MongoDB | Blog
MongoDB | Blog
F
Full Disclosure
有赞技术团队
有赞技术团队
罗磊的独立博客
博客园_首页
MyScale Blog
MyScale Blog
aimingoo的专栏
aimingoo的专栏
Google DeepMind News
Google DeepMind News
M
MIT News - Artificial intelligence
N
Netflix TechBlog - Medium
Engineering at Meta
Engineering at Meta
量子位
I
InfoQ
小众软件
小众软件
P
Proofpoint News Feed

Blog on 1Password Blog

Why secure-by-design is an incentives problem, with Bob Lord | 1Password NIST and AI agents: 1Password’s approach to agent identity | 1Password Go beyond device health with External Checks in 1Password Device Trust | 1Password Natoma and 1Password help enterprises scale AI securely with governed agent access | 1Password New integrations between 1Password SaaS Manager and EPM | 1Password A first step toward post-quantum security | 1Password RSA 2026: Leading the way to secure agentic AI | 1Password How 1Password is Building a Culture of AI Fluency Through AI Champions | 1Password 1Password vs. Keeper Security: A comparison | 1Password 1Password vs. LastPass: Which is right for you? | 1Password Secure MCP credentials with 1Password and Runlayer | 1Password The next layer of AI security | 1Password Building the next chapter of Go-to-Market in EMEA | 1Password Automating SOC workflows with 1Password Enterprise Password Manager | 1Password Automated Provisioning hosted by 1Password: A Simpler, Smarter Way to Manage Access | 1Password Introducing 1Password® Unified Access: Identity Security for Humans and Their AI Agents | 1Password Next-generation automated provisioning, without compromising zero-knowledge security | 1Password Bitwarden vs. 1Password: Which password manager is right for you? | 1Password Password Manager for Families, Enterprise & Business | 1Password | 1Password How to wrangle SaaS contract renewals | 1Password Stop trusting consumer browsers with work credentials | 1Password IAM stops at sign-in. Your credentials do not. | 1Password Your digital pit crew: a 10-minute pre-race security checklist | 1Password 1Password Device Trust is coming to EMEA | 1Password The identity transformation: Analyst and CIO insights | 1Password Why now is the moment to join 1Password Go-To-Market | 1Password Identity and Accountability in the Age of AI Agents | 1Password How 1Password secures agent architectures | 1Password 1Password becomes the first global partner to transact through Express Private Offers in AWS Marketplace | 1Password Start Learning on 1Password Academy | 1Password Expanding Programmatic Access to 1Password | 1Password Zero knowledge vs. a malicious server: A look at ETH Zurich’s research | 1Password Agents are making filesystems cool again | 1Password Black History Month employee spotlight: Joseph Ojelade | 1Password 1Password's new benchmark teaches AI agents how not to get scammed | 1Password Streamlining SaaS onboarding and offboarding | 1Password 3 common SaaS Management challenges and how to avoid them | 1Password How 1Password Is Evolving Its Partner Ecosystem | 1Password How to build secure agent swarms that power production-grade autonomous systems | 1Password From magic to malware: How OpenClaw's agent skills become an attack surface | 1Password Solving the unsanctioned SaaS problem | 1Password 1Password and 60 Day Hustle: cybersecurity for small businesses | 1Password Security advisory for AI-assisted browsing interactions with the 1Password browser extension | 1Password It’s incredible. It’s terrifying. It’s OpenClaw. | 1Password Managing the risks of social logins | 1Password What’s the first security tool your small business should buy? | 1Password As AI Supercharges Phishing Scams, 1Password Introduces Built-In Protection | 1Password How to interview with confidence at 1Password | 1Password Five tips for successful SaaS Management | 1Password SaaS Manager | 1Password Why SaaS License Waste Is a Cost and Security Problem | 1Password AI is changing the IDE. With 1Password, security keeps up | 1Password How IT teams can get a handle on shadow IT | 1Password Bringing secure, just-in-time secrets to Cursor with 1Password | 1Password The Chasing Entropy Podcast Season One is in the Books | 1Password Now available via QBS Software: 1Password Enterprise Password Manager – MSP Edition | 1Password The role of credentials in the AI espionage campaign reported by Anthropic | 1Password The hidden offboarding step draining your budget | 1Password AWS and 1Password: Innovation in AI and beyond | 1Password Simplifying credential security on OpenAI Atlas | 1Password From Social Work to Social Impact: Growing at 1Password | 1Password Password Manager for Families, Enterprise & Business | 1Password | 1Password Now available via Renaissance: 1Password Enterprise Password Manager – MSP Edition | 1Password Behind the wheel at Oracle Red Bull Racing | 1Password Securing MCP servers with 1Password: Stop credential exposure in your agent configurations | 1Password What’s new in 1Password Enterprise Password Manager - Q4, 2025 | 1Password Belonging as a catalyst for high performance | 1Password Password habits are worsening, but leaders see a path to passwordless | 1Password A simpler, faster way to unlock 1Password | 1Password Oracle Red Bull Racing Episode 4, CIO Matt Cadieux | 1Password 70% of IT and security pros say SSO is falling short | 1Password 1Password's Phishing Survey: Avoid Holiday Phishing Scams | 1Password Securing the Win | 1Password SaaS optimization: How to maximize value and reduce costs | 1Password The enterprise AI crisis: Unsanctioned tools and unenforced policies | 1Password An Identity Security taxonomy for Agentic AI | 1Password Introducing new .env file support in 1Password environments | 1Password Speed and security: Mark Hazelton on protecting Oracle Red Bull Racing’s most valuable asset – its data | 1Password 1Password for Good: Giving back during cybersecurity awareness month | 1Password Utah Mammoth and Utah Jazz score with identity security | 1Password Oracle Red Bull Racing CEO and Team Principal | 1Password Three signs you need a SaaS Management Platform | 1Password Closing the credential risk gap for AI agents using a browser | 1Password Microsoft and Dropbox password managers are sunsetting: What it means and what to do next | 1Password From hackathon nerves to internship wins: Kavya’s journey at 1Password | 1Password 1Password now available in Comet, the AI-powered browser by Perplexity | 1Password 1Password announces new integration with Zscaler | 1Password Breaking the mold: Why more women should consider a career in sales | 1Password What security leaders need to know about mergers and acquisitions | 1Password Clickjacking: What it means for 1Password users | 1Password AI and security at Black Hat: 5 key takeaways from a security expert panel | 1Password Blog | 1Password Do any CISOs feel lucky? | 1Password How to lead with confidence in the AI era: a conversation with Nancy Wang, VP, Engineering | 1Password New Device Trust Check makes browser extension enforcement easier | 1Password Purpose, performance, and trust: Inside the culture powering 1Password’s next chapter | 1Password Now available on Pax8 Marketplace: 1Password Enterprise Password Manager - MSP Edition | 1Password The security principles guiding 1Password’s approach to AI | 1Password Choosing the right SaaS management platform for your business | 1Password Simplify access reviews with 1Password SaaS Manager | 1Password How great usability tripled Duke University's password manager adoption | 1Password
Improving in-page notifications in the 1Password browser extension | 1Password
info@1password.com (Steven McLintock) · 2025-11-24 · via Blog on 1Password Blog

The 1Password browser extension is entering its eighth year of service, and quite a bit has changed over that time as we’ve built new capabilities and improvements. One crucial piece of the browser extension is its in-page notification system. With the ability to display a notification on a web page, it allows you to perform many important tasks.

A screenshot showing a Watchtower alert appearing via a browser notification.

Over the last eight years, we’ve expanded the capabilities of this small but mighty piece of the user experience to inform you any time you:

  • Save a new login credential to 1Password that you created while browsing the web

  • Used a passkey to sign into a website that supports the WebAuthn protocol

  • Been offered a suggestion to sign in with a third party provider, such as Google

  • Watchtower detected a breach with one of your vault items

  • Were guided through remediation because Device Trust detected a problem with your device

With this growing list of tasks, and the in-page notification system becoming a new way for us to surface information, we knew it was time to invest in some key improvements and set us up for the future.

One major limitation we needed to tackle was that the current system was only able to display one notification at any given time. This limitation was causing friction for our users, especially because if a second notification were to appear before you addressed the first one, the first notification would simply disappear from the web page. Additionally, for some of our notifications, if you navigated to a new web page without taking action, notifications would be instantly lost.

This was one key area that we knew we could improve on, so earlier this year we set out to overhaul (and improve) the in-page notification system.

Supporting multiple in-page notifications

The main goal we set out to achieve was supporting multiple in-page notifications. If you receive a few notifications in quick succession, they should all remain visible and actionable, in a collapsed stack.

When you are ready to interact with any of these notifications, you can do so by clicking the “View all” button (or by pressing the down arrow on your keyboard) to expand the stack.

When you would like to collapse the stack, simply click the “Collapse all” button (or press the up arrow on your keyboard):

A gif showing the new, stackable notifications as a cursor collapses and expands them.

Using this new feature, we are now able to keep track of all in-page notifications, ordered by priority.

Notifications are intelligently configurable to follow you as you navigate across different web pages (while others are contextual to the current web page), and they will automatically disappear when they’re no longer needed. 

For those interested in the technical details of how we did this, we moved responsibility to the service worker (within the browser extension) and made it the source of truth for notification states, as opposed to the user interface.

For security reasons, this potentially sensitive information stays local to your device. It remains stored in memory in the browser extension using the Manifest V3 API, chrome.storage.session.

We also have full awareness of what notifications are being shown on each tab, and we will not display a duplicate notification, unless explicitly told to do so.

When you load a web page, if there are any notifications to display for the current tab, an embedded iframe is injected into the web page, inside of a closed shadow root to an internal extension page. The user interface (embedded in the iframe) will call out to the service worker to retrieve those notifications and render them using our design language, Knox.

Supporting fullscreen in-page notifications

Fullscreen Notifications is a feature that we currently use for passkey and Device Trust notifications:

A screenshot of a fullscreen notification prompting a user to save a passkey.

If you need to interact with a notification before you’re allowed to interact with a web page, such as with our passkey and device trust flows, any of our in-page notifications can now be configured for fullscreen mode.

For fullscreen notifications to work seamlessly with a stack of multiple notifications, we had to rebuild “fullscreen mode” from the ground up.

For example, if a stack of notifications is present on a web page when a fullscreen notification is shown, the remaining non-fullscreen notifications are hidden until you handle the fullscreen notification. Once you’ve taken care of the fullscreen notification, the non-fullscreen notifications are shown.

Migrating in-page notifications

Many of the types of notifications we mentioned above were built in bespoke ways over the last eight years. This approach left us with a set of notifications that were all different in slight but impactful ways. This was the final goal for our new system: to reduce that duplication and make it easier to maintain the existing notifications, and an extensible way to build new ones. When we had finished building out support for multiple notifications, we began to migrate each of our notifications over to the new in-page notification system.

This has been a team effort, and over the last few months we have been busy migrating over each of the existing notifications. In addition to supporting the new system, we also continue to support the legacy system, due to the gradual rollout of this feature. Once we’ve rolled this out to all of you, we will take the final step of removing the old code and bidding it a fond farewell.

What’s next for in-page notifications

Support for multiple in-page notifications has now rolled out to our nightly and beta channels, with stable beginning to roll out this week! We will continue to make refinements to improve in-page notifications in the browser extension going forward.

Thank you for reading! If you have not already, please do try out the new in-page notifications.