Have to enter master password after 1P app is restarted even if device isn't?

SVanDee
SVanDee
Community Member

The text under PIN Code in Settings Security says, "Your master password will be required after a device restart ...". We leave an iPad sitting next to our front door to act as an electronic bulletin board for the family. We want to stop all the apps except those like Calendar that are related to that function so we can 4-finger swipe between them and not have to slew through a bunch of unrelated apps. The next time I start 1P, it makes me enter the master password even though PIN Code is enabled and the device has not been restarted. Can't 1P tell the difference between the device and the app being restarted? After you added PIN code unlocking, we switched to a long, complex master password and started syncing through Dropbox thinking we'd hardly ever have to enter the master password manually. Sure will be sorry if we do.

BTW, I'd never noticed Advanced, Security, Require Master Password under Settings. It's set to Never. So does that actually mean "Never unless the app is restarted"?


1Password Version: 6.0.2
Extension Version: Not Provided
OS Version: 9.1
Sync Type: dropbox
Referrer: forum-search:Have to enter master password after 1P app is restarted even if device isn't?

Comments

  • littlebobbytables
    littlebobbytables
    1Password Alumni

    Greetings @SVanDee,

    The advanced option you found was a way to allow users to force 1Password to ask for the Master Password on a more regular basis, for those uncomfortable that it was only with a restart of the phone that the full Master Password was being asked for.

    Normal behaviour is that quitting the app shouldn't cause the Master Password to be required.

    I don't know how it could have happened but something that might be worth trying is to disable the PIN Code option and then re-enable. If something has gotten messed up this might reset it. It's certainly worth a shot anyway as it won't take long to test and there is no downside. Can I just confirm that you do have a passcode set up for the iPad from within iOS's settings? This is required to enable the PIN Code at all so it should be but I think the iOS passcode can be disabled afterwards and that might leave 1Password for iOS in a unknown state.

  • SVanDee
    SVanDee
    Community Member
    edited November 2015

    OK, I see the problem. As I explained in the original post, this iPad just sits next to our front door so no one but my family has access to it. I'm not sure it's good for an iPad to be on all the time so I wanted people to close the cover when they were done with it. I turned its PIN code off so all they had to do to bring the Calendar and related apps back up was open the cover. In order to try your suggestion, I disabled the PIN code in 1P, stopped the program, restarted it and tried to enable the passcode. It said I couldn't do that without enabling the iPad's PIN code first. I guess I'll have to enable the iPad's PIN and then 1Ps, leave the iPad on all day and train myself to put it to sleep every night and wake it up again every morning. Shucks.

    Please consider allowing 1P's PIN code function to be turned on whether the device's is or not.

    Actually what I'd like is a "Never" option on the Auto Lock function so I wouldn't have to enter either a PIN or the master password except after a device restart. I've asked for that before. My argument has been that a lot of data on a mobile device requires protection besides 1P's data. User's must decide what kinds and levels of security they need and provide it at the device level. Offering additional layers of security within 1P certainly doesn't hurt anything. Turning them on by default is even a good idea. But I don't understand why AgileBits is determined not to let users decide how much protection they want from 1P.

  • Hi @SVanDee,

    I don't think it is unreasonable for a security product to have a minimum acceptable level of security offered to the data we are supposed to be protecting. We do appreciate the feedback though, and will take it into consideration as we move forward.

    Ben

This discussion has been closed.