I have Question about Recovery and other recovery options.

Nitrogenhelp
Nitrogenhelp
Community Member
in Families

1st Question :
https://support.1password.com/recovery-codes/
"You won’t be able to use a recovery code if you have an active 1Password session or have recently signed in."

I'm so frustrated because I can't use recovery key when I want to.
Recently, I changed my master password but I was confused what it was.
So I tried to use my recovery key but I couldn't use it.
(I deleted my account without hesitation because I backed up my data though.)
I'm wonder after some time passed then all my sessions are automatically closed and I can use recovery key?
And if so, How long do I have to wait?
Imagine you have to access your account in a hurry but you can't use recovery key right now.
I can't understand why you guys do these kinds of things. Even google and no other website don't prevent using recovery key.

  1. If I'm family organizer and one of my family member is using 2FA app, then what happens when he forgot his password and his 2FA device.
    Can I help him to recover his account and access his data?(I mean, ids and passwords of registered sites in the 1Password account.)

  2. I'm confused about family account.
    Can I configure family account 2FA and recovery codes beside my private 2FA and backup coes?
    (I mean, a shared 2FA or recovery codes among family members.)

1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided
Browser: Not Provided

Comments

  • ag_tommy
    ag_tommy

    @Nitrogenhelp

    I'm sorry you had trouble.

    1. Recent access might indicate you have access to the account and there is no need to complete recovery.

    2. Yes, 🚑 Recover accounts for family or team members will allow you as the Family organizer to help them in regaining access to their account. During Account recovery 2FA is disabled automatically.

    3. Your recovery code and 2FA are for the Family Organizer account. No, there is no group recovery code for the family. Each member would have their own recovery code.

    🚑 Recover accounts for family or team members

    🚑 Generate and use recovery codes

  • Nitrogenhelp
    Nitrogenhelp
    Community Member
    edited September 8

    @ag_tommy

    I really love features of 1Password especiall when it comes to AutoType to Desktop Apps.
    (For example, auto filling to steam desktop app by pressing ctrl+shift+space.)
    And I know what happens when recovery key is exploited or leaked so that's why 1password don't allow me to use recovery code when recent login was successful or there's active session I guess.
    But it's so critical to users who need to recover account in a hurry.
    I think it needs improvement.

    And how to make active session to be inactive? Do I have to turn off device?
    (if so, then I can't turn off device when I lost it.)
    Or would it be closed automatically after a certain time?(after an hour or...)

  • ag_tommy
    ag_tommy
    edited September 10

    @Nitrogenhelp

    Generally speaking, when I've talked others in the same situation it's because they have 1Password on another device such as a phone or tablet.

    Earlier you said you changed the password and then deleted the account. Changing the account password would seemingly be where you're recently accessed the account. A lot of times folks try to create the code and then immediately use it. Yes you could sign out any devices but in your situation this would likely not be possible for the aforementioned reasons you gave.

  • Nitrogenhelp
    Nitrogenhelp
    Community Member

    @ag_tommy
    Thank you for your response.
    In the end, I decided to write down the password in my emergency kit and keep it safe and separate from the internet to prevent being exploited.
    In addition, I've decided to add other Organizer on my family account so that I can request account recovery when I need.

    I've looked at other password managers, but I haven't found anything quite like 1Password.

    When it comes to the recovery code, I'd like to suggest some improvements like....
    At first 1Password sends an email if user inputs recovery code : “You will receive a recovery in 6 hours” and then send a link to recover user account after 6 hours.

    Also, There's a possibility of typing error while changing user password and unintentionally lose access to the account that just changed, so I'd like to suggest adding a feature that shows the password inputting in the textbox on the page where you change your password to prevent this.
    Currently, I can't see what I'm typing in the password input box while I'm changing my password.

  • ag_tommy
    ag_tommy

    @Nitrogenhelp

    Sounds like you've take good measures to ensure your safety. Multiple organizers are a plus in my opinion. :)

    I have shared both of your suggestions with the team for further consideration.

    ref: PB-42234680
    ref: PB-42234697