TouchID "stealth mode" - feature request

JimClark
JimClark
Community Member

There have been a number of articles lately about police/law enforcement "forcing" someone to unlock their smartphone with their finger print, but not being able to make them supply a security code / password.

I assume this would apply to 1password as well. I understand TouchID is a convenience feature, and that using it or a 4-digit quick access code reduces security in exchange for speed. However, I was wondering if Touch-ID access needs to be "advertised"??

Could there be an option to always ask for master password, but allowing TouchID to still function? I know it's not a perfect solution... but every little bit helps...

Comments

  • Hi @JimClark,

    I was wondering if Touch-ID access needs to be "advertised"??

    Unfortunately it does. Apples doesn't provide us with a way to access Touch ID in any other way than how we're currently doing it.

    You can select "cancel" at the Touch ID prompt to force entry of the Master Password. If entering a possibly hostile environment you may want to do that prior to entering.

    Thanks!

    Ben

  • bachya
    bachya
    Community Member

    Hi @bwoodruff – I am interested in this, as well, but wanted to confirm with your team that this bug (https://discussions.agilebits.com/discussion/comment/199196) currently prevents such a cancellation fallback from occurring?

  • littlebobbytables
    littlebobbytables
    1Password Alumni

    Hi @bachya,

    You're correct, the current behaviour of the Cancel button does stop falling back on the Master Password in the stable release of 1Password for iOS. That isn't to say it isn't reachable from the lock screen though (until we resolve the other). If there is a failed attempt at Touch ID a second button appears. This second button is titled Enter Password and selecting that button would force the use of the Master Password. That's the quick and dirty way of forcing the requirement of the Master Password. The Lock Now option in Settings > Security also forces the requirement of the Master Password.

This discussion has been closed.