Secondary vault is unlocked with primary - is there a way to change this?

jjaco

When I unlock the primary vault, my secondary vault is also unlocked. Is there no way to change this?

I'd like to use my existing vault as default and just add a second one with just a few passwords. This should be the high-security vault and only opened when necessary. So I'd like to have a really long password for this which I would not like to enter every time I access 1PW for just the everyday logins to some news websites and so on.

Is there a way to achieve this?

jjaco

Ah, sorry, just after I posted this, I found this thread, where my question is answered – unfortunately, the answer is no…https://discussions.agilebits.com/discussion/25597/multiple-vaults-secondary-vault-unlocks-automatically

Drew_AG

Hi @jjaco,

Yes, as you already figured out, there's no option to change that behavior, so when you unlock the Primary vault, it will automatically unlock your secondary vault(s) as well.

I'm not aware of any plans to change the way this works, but I can certainly forward your comments to our developers. Thanks for the feedback! :)

janrothen

I also wanted to separate my not so sensitive credentials I use on a daily basis from the more sensitive ones (Social Insurance Number, Passport, Credit Cards, 2 forms authentication reset keys, etc.).

I really like the convenience of automatically log in to websites with Cmd+$, but I have my concerns about having the browser plugin with all the rights to my more sensitive data embedded in it. That's why I wanted to separate this data into 2 vaults and only unlock my Primary vault in the browser.

I was surprised that my Secondary vault gets unlocked together with the Primary one. This is a unintuitive design decision and defeats what I intended to do.

It is also inconvenient that there's no option (yet) to change the vaults properties (password, icon etc.).

I hope this will be possible in the future. Thanks!

hawkmoth

You can unlock the secondary vault without opening the primary one. Perhaps that could serve your wish? Put all the stuff you want to use regularly in a secondary vault, but leave the things wou don't want to open all the time in the primary one?

Drew_AG

Hi @janrothen,

As hawkmoth mentioned, multiple vaults are a good way to separate your different types of data (from your message, I wasn't sure if you already use multiple vaults or not). Alternately, for items that are in the same vault, you can organize them using folders or tags.

I have my concerns about having the browser plugin with all the rights to my more sensitive data embedded in it.

Actually, starting with version 4, your 1Password data is not stored in the browser extension at all. The 1Password extension communicates information from the main application to the browser, but all your Logins and other information are stored inside 1Password, not in the extension.

I was surprised that my Secondary vault gets unlocked together with the Primary one. This is a unintuitive design decision and defeats what I intended to do.

I'm sorry it doesn't work the way you expected it to! 1Password's multiple vault feature was designed so that you still only have to remember one master password, no matter how many vaults you create. Your Primary vault holds the encryption keys for your secondary vaults, so unlocking your Primary vault gives you access to the data in your other vaults as well.

However, in case it helps, if you want to unlock a secondary vault while leaving the Primary vault locked, you can switch to the secondary vault prior to unlocking the main app by selecting 1Password > Switch to Vault. Or in the 1Password extension, click the 1Password icon that appears on the lock screen to choose a vault to unlock. Unlocking a secondary vault leaves your other vaults locked.

It is also inconvenient that there's no option (yet) to change the vaults properties (password, icon etc.).
I hope this will be possible in the future.

You're not alone! ;) Our developers are looking at making this easier in the future, but for now, the only way to change those details for a secondary vault is to sync that vault with Dropbox (or Folder sync), delete the vault from 1Password, then re-add that vault by double-clicking its .agilekeychain file.

We're always working to improve 1Password and we appreciate your feedback! If you need anything else, please let us know.