Feature Request: Require Password after N minutes [Advanced > Security > Require Master Password]

jdelic

Currently 1password only offers the option of using TouchID or a master password, with the only combination being that the master password will be required again after a device restart.

That setup makes it impossible to use TouchID if you're security conscious. For two reasons:

• TouchID is a username, not a password
• TouchID can be accessed without your consent (by forcing your finger on the sensor)

However, the use-case remains: I often switch between applications while, for example, setting up an account. My pass phrase is 25 characters long. So right now I set 1password to not use TouchID, but stay unlocked for 10 minutes. So right now if I log into one of my accounts, my 1password is unprotected for an extended period of time.

I would think it'd be much better if I could set it up so that 1password allows me to use TouchID to reopen the app for N minutes and after that requires the pass phrase. In the current UI this could be accomplished by adding a "Require Password after N minutes" option, much like the current Auto-Lock option.

Thank you,
jdelic

MikeT

Hi @jdelic,

You can force 1Password to ask for the master password after a certain time via 1Password's Advanced > Security > Require Master Password and set 1Password to require the password after an hour, a day, 2 days, 2 weeks or after 30 days. [Update: TouchID must already be turned on for 1Password to see this option]

You can also force it anytime by going to Security > Lock Now as well.

jdelic

hey @MikeT,

for the life of me I can't find that setting. I have 1password v6.0 on my iPhone 6 and under Settings > Advanced, I only see:

• Prompt to open websites
• Language
• Create Backup / Restore from Backup
• Allow Custom Keyboards
• Diagnostics
• Erase Data and Settings
• Erase iCloud Data

Under Settings > Security I can only see the settings I mentioned in my first post. What am I missing?

MikeT

Hi @jedlic,

I apologize, I forgot to mention that that option only shows up if you have Touch ID enabled first.

If you enable TouchID first, it will then show up in Advanced > Security.

jdelic

Aha! Awesome! Well, 1 hour as the minimum setting is slightly more than I'm really comfortable with (I'd prefer 10 minutes), but it's basically exactly what I asked for! I think that it's unnecessarily hidden... why not just put it in Settings > Security? Because if I'm not able to find it (and I'm a developer), probably no normal user is... but still, I was expecting to wait months for this to show up and it's already in there. So that's great news :).

Thanks for the help!

MikeT

You're welcome. We'll revisit the settings to make them more simplified and intrusive, thanks for your thoughts on that one.