Asked to approve Touch ID when my Mac doesn't support it - is this a security concern?

swordio777
swordio777
Community Member
in Mac

Hi there, something odd happened to me when signing into 1Password this morning, and I hope someone can reassure me that it's not a security concern.

I'm using a mac studio with the original Apple bluetooth keyboard & trackpad (The old ones that take AA batteries. The keyboard does not have Touch ID built in).
I also wear an apple watch, and allow 1P to unlock via a double-click on the watch.

When logging into the 1Password app this morning, I entered my password manually, then the app asked me to approve the use of Touch ID by double-clicking my apple watch. Foolishly I did so, even though my mac has no way of receiving a Touch ID input.

So my question is whether this could be a potential security concern? For example, if someone got access to my login credentials and tried to set up 1Password on their iPhone, could the mac app ask me to confirm the use of Touch ID on a separate device?
I don't believe this is possible, but I'm not certain.

As soon as this happened I updated to version 8.10.56, but I didn't take note of the version I was on before the update.

If this is a security concern, is there a way for me to force all instances of 1P to log out on all devices, or would I need to update my Master Password.

Thanks for any insight on this.

1Password Version: Not Provided
Extension Version: Not Provided
OS Version: macOS Sonoma 14.6.1
Browser: Not Provided

Comments

  • EvonG1P
    EvonG1P

    Hello, @swordio777. Thank you for writing in.

    Based on what you shared, you're running into a known issue our development team is tracking with the 1Password desktop app on a Mac. This problem involves the Apple Watch prompt referencing Touch ID, even though Touch ID is unavailable on your device. I've added you as an affected user to our internal reporting.

    While I can't give an exact timeframe for a fix, I recommend keeping 1Password up to date so you can receive the fix as soon as possible. You can find the updates posted on our website:

    I apologize for the inconvenience. Let me know if you have any questions.

    -Evon

    ref: dev/core/core#34088