TouchID timeouts and Extension position - bugs? [Answers in post #11]

Joelc

Great new version, congrats...

Two bugs that I have discovered that would be great to fix are as follows:

1. Touch ID "timeouts" meaning that although Touch ID is enabled in stops working after a few minutes and no longer allow log-ins via touch but only via password...after / once the password is entered then the Touch ID starts working again for a few minutes and then, the cylce continues.

2. Extension position...in Safari I added the extension and moved it to the far left only to discover that it moved back to where it started, at the far left...would be great to this sorted as well.

Thanks again for the great app and the free upgrade!

Joel

goorchid

I am having the same issues.

gordon9293

Did you try changing the timeout for the master password in security settings? I think it defaults to require a password after an hour, even if touch ID is enabled. I set it to 30 days. There are separate timeouts for touch ID and password.

prime

I have the same issues as well. #2 is annoying, but I have a feeling that's an apple issue. Other than that, it's awesome! Great update!

Ciwan

I am having the same problem as Joe (OP) with the timeout of Touch ID. I would personally consider this a flaw in the thought process here. If I have Touch ID enabled, it should not time out. I should always be asked for my fingerprint with a choice to enter my password

Also, in terms of UI, it is bad to have the request for the fingerprint as a pop-up! I am sure your UI team could have done better. Draw a thumb print on the main lock screen or something.

Ciwan

PS. I think Joe meant iOS 8 bugs.

theElvis

another issue

TouchID doesn't work / popup in Safari

flaminiom

I have the same issue with TouchID.

I have the master password set to Request After 30 Days and Request Fingerprint After 15 minutes. It will allow me to unlock with TouchID for a while, and then require me to unlock with the master password again. My understanding is with this setting it shouldn't ask for the master password again for 30 days.

iPhone 5s/64GB/Verizon/Gray, iOS 8.0 (12A365), 1Password 5.0 (500008 (N)), Sync via Dropbox

I've also observed the extension order issue in Safari, but not sure if that's a 1Password or iOS 8 issue.

Joelc

Appreciate the above response and note that I too have dug a little deeper.

I think I understand things (although it is unnecessarily confusing) as it appears that there are two timers i) time between opening with the master password and ii) time before asking for a finger print again...to maximize the amount of time that one can use Touch ID the first needs to be set to 30 days (longest available) while the second can be set to a shorter interval for security (say, two hours)...

I do however wish that the functionality would be different and simpler...to me the best approach would have been to simply allow the use of Touch ID in place of the master password (i.e. in the same way one can use Touch ID to unlock a phone).

hawkmoth

With respect to the order of the extension, I also noticed that the 1Password shifted back to the far right after I rearranged it to the far left. But I redid the shift and the second time it stuck and remains where I put it. I'd bet a cookie that the issue is an iOS one, not the fault of 1Password.

Megan

Hi @Joelc, @goorchid‌, @prime, @Ciwan‌ and @flaminiom‌

Touch ID "timeouts" meaning that although Touch ID is enabled in stops working after a few minutes and no longer allow log-ins via touch but only via password...after / once the password is entered then the Touch ID starts working again for a few minutes and then, the cylce continues.

You can customize the length of time 1Password will wait before prompting for your Master Password - this setting is independent of whether or not you are using Touch ID. To change this setting, go to Settings > Security and change the value for "Request after". Note that for security reasons, it is impossible to configure 1Password so that it never asks for the Master Password.

To learn more, you can see our guide here:

http://guides.agilebits.com/1password-ios-kb/4/en/topic/touch-id-faq

Please note as well that you must have the 'Use iOS keychain' option enabled in Settings > Advanced. If you do not allow 1Password to store the Master Password in the iOS keychain, then when 1Password is closed in the background (as happens with inactive apps when iOS needs the memory), you will need to enter your Master Password when you open 1Password again.

Extension position...in Safari I added the extension and moved it to the far left only to discover that it moved back to where it started, at the far left...would be great to this sorted as well.

This is a known issue - it seems to be on Apple's end, as users are reporting it with other extensions and not just the 1Password extension. (So I'll certainly not take @hawkmoth's cookie bet!)

steve28

Here's how to config for TouchID all the time (except after restart):

https://discussions.agilebits.com/discussion/comment/142823/#Comment_142823

flaminiom

I didn't have this, so hopefully that's the missing piece. We'll see how it goes. Thx.

FWIW, it might be helpful to spell this out in the config. :)

Please note as well that you must have the 'Use iOS keychain' option enabled in Settings > Advanced. If you do not allow 1Password to store the Master Password in the iOS keychain, then when 1Password is closed in the background (as happens with inactive apps when iOS needs the memory), you will need to enter your Master Password when you open 1Password again.

Megan

Hi @flaminiom‌

I'm keeping my fingers crossed that these settings get 1Password working for you the way you wish! Of course, we're here to help if you run into any snags. :)

I'll pass your thoughts about the iOS keychain detail along to our docs team. Thanks for the feedback!

Joelc

Megan, that you, very much appreciated....

Megan

Hi @Joelc,

Always happy to help! We're here if you have any further questions. :)

The Doctor

Hiya Megan...long time no post...which means all was dandy...until...TODAY (dum dum dimmmmm)

Here is some detailed testing that hopefully will help you guys with the Touch ID preference being wonky.

I have followed all of Roustem's suggestions to no avail...I have also tried the following.

1. Resetting the security preferences and then Force Quitting from that page -- Next Login Touch ID DOES Prompt
2. Resetting the security preference and then hitting home button and waiting 0 mins -- No Touch ID prompt
3. Resetting the security preference and then hitting home button and waiting idle timeout mins -- No Touch ID prompt
4. Resetting the security preference and NOT hitting home button and waiting idle timeout mins -- Touch ID DOES prompt
5. NOT Resetting the security preference and NOT hitting home button and waiting idle timeout mins -- Touch ID DOES prompt

So, my lay conclusion, is that Touch ID ONLY WORKS if the idle timer is triggered or a force quit occurs before a manual lock or home button press as in if the App is foreground. Once it goes to sleep...the only way to get Touch ID to work again is by following Scenarios 1, 4, or 5 above.

This obviously sucks...since Scenarios 1,4, and 5 never really occur in real life :-(

Hope this helps...pls let me know...

pax,
Doctor...just The Doctor...

p.s.
I'm Scottish now, so tend to have a shorter fuse...so fair warning.

rafe17

I too am having the same issue as described above. My TouchID deactivates on iPhone 5S running iOS8. The only way it asks for the TouchID is when I disable it and then re-enable it in the settings menu.

Megan

Hello Doctor, and @rafe17‌

(Doctor, I'm so glad to hear that things have been working so well that you haven't needed to pop in here, although it's always lovely to see your avatar!)

I've split your comments from the original discussion: Dropbox sync and TouchID deactivating, which was speaking more about Dropbox sync and into a thread discussing TouchID settings.

Please have a look at my post #11 for some details on how TouchID should be behaving for you. The FAQ posted there has some great tips.

If these tips do _not_ get everything working as you would expect, please do let me know and we'll investigate further. :)

rafe17

Hi Megan. That's for your quick response. You are absolutely right and changing the setting 'request after' setting to a bit longer i.e. 48hrs enables me to use TouchID for longer. Thank you

Megan

Hi @rafe17,

I'm so glad to hear that those steps got things working properly for you! We're here if you have any further questions. :)

gmpalter

Hi,

I can't get Touch ID to work for me at all. I have an iPhone 6. "Use iOS Keychain" is enabled. My master password timeout is set to 30 days. When I enable Touch ID, 1P always asks for my master password no matter what I try.

Ben

Hi @gmpalter‌

In Settings > Advanced please try toggling 'Use iOS keychain' off and then back on. Then in Settings > Security please try toggling 'Touch ID' off and then back on.

Please let me know how that turns out. Also: Have you updated to 1Password 5.0.1?

Thanks!

Ben

gmpalter

Yes, I'm running 5.0.1.

Also, I had to delete and reinstall 1P because of the "No Pro Features" problem described elsewhere.

I toggled the settings and Touch ID is working at the moment. We'll see how long that lasts.

wlynes

iPhone 5S running iOS 8.0 and 1Password 5.0.1.

I've followed various instructions on this forum and the latest troubleshooting steps suggested by bmwoodruff and still see 1Password to fail to prompt me to log in with TouchID. All password, all the time.

Megan

Hi @gmpalter‌,

I'm so glad to hear that @bwoodruff‌'s steps got things working for you! I'll keep my fingers crossed that 1Password continues to behave properly for you. If it acts up again though, you know where to find us. :)

Hi @wlynes,

Could you please confirm for me if you are seeing this in both the main app and the extension? We are currently tracking a bug where 1Password's app extension fails to respect the security settings of the main app, but we're not seeing many cases of the settings not being respected by the main app.

digitaldog

Sorry guys, I've tried all the steps outlined and the TouchID doesn't work as I expect it to. I've turned on and off all the buttons you suggest, no go. Here's what I suspect people want: anytime you open the app on iOS, instead of entering the master password, you are asked to use TouchID. That's not possible at this point. Best I can do is set the time for 1 hour in the app and it will ask for unlike via the TouchID.

Here are the steps recommended in another post that didn't work:

Here's a setup that's "TouchID Only except after restart":
Settings->(scroll to bottom)->Advanced->"Use iOS Keychain" -> ON
Settings->Security->Touch ID-> ON
Settings->Security->Request fingerprint... (set as desired)
Settings->Security->Lock on Exit-> Set to on if you want to have to Touch ID everytime you open the app
Settings->Security->(in the top section)->Request After-> 30 days

Again, this works but only for the time limit set after which, it always asks for the master keyword. It's a bug unless there is some magic trick here I've yet to discover. Good luck, when it does work, it will be super awesome!

flaminiom

Things for me have been good since I told 1Password to delete all data, uninstalled/reinstalled, then do a fresh Dropbox sync. Obviously make sure your master copy is good on Dropbox. It's only been about a day, or so, but that's longer than I've gotten before.

Megan

Hi @digitaldog‌

Here's what I suspect people want: anytime you open the app on iOS, instead of entering the master password, you are asked to use TouchID. That's not possible at this point.

You're right, at this time it is not possible to completely disable the prompt for the Master Password. This is because your Master Password is, ultimately, your only way to access your 1Password data. We don't want you to forget this password because you've never had to type it in. That being said, the security preferences that we do offer now can ensure that you enter your Master Password very few times - possibly only when you restart your device.

Again, this works but only for the time limit set after which, it always asks for the master keyword.

Unless I'm misunderstanding you, this sounds like correct behaviour. If you have set your time limit for 1 hour, then of course 1Password should prompt you for your Master Password after that hour. Please let me know if I am misreading your statement. :)

As is suggested in the previous post that you've quoted, you can set 1Password to only prompt for your Master Password after as long a period as 30 days. Then, as long as you use 1Password more than once every 30 days, you will never have to enter your Master Password (except when you restart your device, of course) because the time-out counter will reset each time you unlock the main app with TouchID.

---

Hi @flaminiom‌

I'm sorry that you had to go through a bit of a process there, but I'm glad to hear that everything is working nicely for you now! :)

digitaldog

If you have set your time limit for 1 hour, then of course 1Password should prompt you for your Master Password after that hour. Please let me know if I am misreading your statement.

Right, but I was hoping I could bypass this such TouchID would work for a longer period. That doesn't appear to be how you've designed the product.
I understand your point about remembering the master password. But my finger print isn't going to change (as far as I know) so it seems like a good way to unlock the product for an extended period.

As is suggested in the previous post that you've quoted, you can set 1Password to only prompt for your Master Password after as long a period as 30 days. Then, as long as you use 1Password more than once every 30 days, you will never have to enter your Master Password (except when you restart your device, of course) because the time-out counter will reset each time you unlock the main app with TouchID.

That's what isn't working for me. IOW, I did setup the product as outlined. But after 1 hour, I was asked to enter the master password, TouchID stopped working. I wasn't asked to use my fingerprint to unlock.

So let me see if I have this correct. One should be able to have TouchID work longer than one hour right? But after 30 days OR if the phone reboots, I'll be asked to enter the master password after which TouchID should take over? I'm fine with that behavior and think it makes total sense to have these two limitations. What isn't happening, if I understand you correctly is the ability to have TouchID work past 1 hour when the phone has not been shut down.

It seems (again if I'm understanding this correctly) what we need is a "Request Finterprint After" > 30 days. Expect of course if the phone restarts. This would allow TouchID to work for up to 30 days without the need to enter the master password. Using just TouchID.

Megan

Hi @digitaldog‌

I'm including a screenshot of my own security settings here in hopes that it will help you understand.

With these settings, here's what happens:

• Request after 30 days: if I have not used 1Password for 30 days, when I open 1Password, it will ask for my Master Password. (You'll notice that's essentially what is written below the 'Request After' field)
• TouchID is enabled
• Request Fingerprint is set to After 2 minutes
• Lock on Exit is enabled. So, any time I move away from the app, 1Password will lock. When I go back to the app, 1Password will request my TouchID ... unless I have been gone from the app for 30 days. If that is the case, 1Password will request my Master Password. Again, these settings are explained just below the 'Lock on Exit' field.

It seems (again if I'm understanding this correctly) what we need is a "Request Finterprint After" > 30 days. Expect of course if the phone restarts. This would allow TouchID to work for up to 30 days without the need to enter the master password. Using just TouchID.

The settings I've just shown you above will give you exactly the behaviour you describe. Perhaps the confusion is coming in the wording of the existing text?

We are working on making these settings more clear, because you're certainly not the only one who's getting a bit tangled up here.