Master password change & sync.

djf7777

I'm trying to help someone with iPhone / iPad / Windows sync using Dropbox. In all the years I've used 1Password, and all the people I've converted, I've never seen the software work quite like this...

New credentials (cards / logins) seem to come through fairly quickly - a minute or two.
Changing the master password, on the other hand, is EXTREMELY frustrating.

When the change is initiated from iPhone, the iPad & Windows don't see the change.
When the change is initiated from Windows, iPad sees the change right away but iPhone does not.
When the change is initiated from iPad, Windows takes a minute or two to see the change, but the iPhone does not.

I'll have to test further with my own stuff, but it seemed with his equipment that the way to make this work was to change on Windows, allow the sync to go through on iPad, then delete 1Password from iPhone, re-install, and re-link to Dropbox to force a re-read of the master password data.

Is this a known issue, or do I have some kind of perfect storm brewing?

Thanks.

Megan

Hi @djf7777‌

I'm so sorry to hear that you're having trouble with the Master Password here. With background syncing, the change to the Master Password should sync to all devices after the change has occurred. It is important to note though that the old Master Password will still be accepted until the new one is entered. Were you attempting to use the previous Master Password or the newly changed one?

We are currently tracking a potential bug where Master Password changes don't seem to sync properly between devices, but we haven't been able to quite figure out where things are getting tangled up. If you find any reproducible steps, please do let us know.

In the meantime, if you are finding that changes to your Master Password are not properly syncing across devices, please manually update it so that you are using the same Master Password on all devices.

I'm sorry I don't have a perfect answer for you here, but I hope this helps!

ref: CSI-5

manuelmpf

I am having the exact same issue.

I'm currently using the 4.5 BETA on Yosemite. I changed the Master Password on my Mac at work and when I returned home, even after syncing with DropBox, the old Master Password was being accepted on the home Mac.

The only workaround was to disable syncing and then re-enable it on the home PC.

This is beyond unacceptable.

Megan

Hi @manuelmpf‌

I'm so sorry to hear that you've been having trouble getting your Master Password change to sync up. Just to clarify, did you try the new Master Password on the home Mac? As I mentioned above, the old Master Password will still be accepted until you enter the new one.

In any case, I've added your feedback to the issue in our internal tracker. If you have noticed any other details that could help us track this down, we'd be happy to hear them! :)

xtianc

I am not sure if this has been resolved, but I am having the similar issue. It took over 5 min for the syncing to occur.

Steps:

1) Change master pwd in 1Pwd for Mac
2) Try to use new pwd in iOS devices, iPhone and iPad, it won't work.
3) I am able to log in using the old pwd in both iOS devices. However, I need the new pwd for the Mac

Jasper

Hi @xtianc,

Some users have reported that the master password doesn't always sync, and our developers are still investigating. If your new master password does not automatically unlock your data on your other devices, please update the master password manually to match on each device.

Please let us know if you have any other questions. We're always happy to help!

SirDaedalus

Hi there,

I really love 1Password (I also bought the iOS and Windows version). It works flawlessly. I also installed it the trial version in my sister's environment (Windows 7 PC, iOS 8.0 iPad Retina, Nexus 5, everything connected via Dropbox). Everything works great, and the sync across all devices works flawlessly.

BUT: **The **master password (which has been changed on her Windows PC) synced to the iOS device, but the sync to the Android device does not work. :-/

In addition to "being annoying", this really concerns me / made me thinking: Assuming there has been a risk that my master passwort has been compromised (for whatever reason), and as a precaution I decide to change it, do I have to fear that there are always multiple versions of my vault (being accessible with old master passwords) are "lying around" on various devices / dropbox as backups? Let's say if I change my Master Password once every quarter, do I have multiple potential "breaches" because of "old vaults with old master passwords" still lying around?

Kindly let me know what you think.

Ben

Hi @SirDaedalus,

If you turn off syncing on Android and re-enable it are you able to pick up with the new Master Password?

Assuming there has been a risk that my master passwort has been compromised

If this assumption is there then all of the data protected by the previous Master Password must be changed, as if an attacker were able to previously get a copy of your keychain (e.x. through a vulnerability in Dropbox) then yes, you'd have major problems. That is an extremely large if of course, and unless you're a head of state or wanted by a government there is very little chance that you'd be an interesting enough target for an attacker to go to all that work. It would also require a fair bit of coincidence.

But as a 'good practice' if you feel your Master Password has been compromised not only should the MP be changed but so should the data it protects.

Thanks!

Twodomers

This is issue still does not seem to be addressed. I changed my master password on Windows and it synced with my Mac and iPad fine, but not my iPhone. I agree this is a huge issue. If for some reason I am concerned about an associate having learned my master password for some reason, when I change my master password I would have assumed that all the master passwords would have been changed. I only log into 1Password on my iPhone occasionally, so I would not have known about the glitch in any short order. Please address.

Thanks!

Ben

Hi @Twodomers,

Our developers are investigating the issue you mentioned, but the point remains (made here) that even without this bug it would still be important to change all of the passwords protected by a Master Password that you feel may have been compromised.