Alternative fingerprint for 1Password.

NovaScotian
NovaScotian
Community Member

I use a thumbprint for the passcode on my iPhone 6S, and apparently must use the same thumbprint to log into 1Password. What I'd like, however, is to use an alternative fingerprint (the iPhone 6 will accept several -- my wife has access) to log into 1Password, i.e., a different passcode for 1P than for the phone.


1Password Version: Latest
Extension Version: Not Provided
OS Version: iOS 9.1
Sync Type: Dropbox

Comments

  • danco
    danco
    Volunteer Moderator

    I doubt if this is possible. But Touch ID itself can store several fingerprints, though maybe this is not enough for your needs.

  • AGMarshall
    AGMarshall
    1Password Alumni

    @NovaScotian 1Password uses the Touch ID API, so 1Password is using whatever fingerprint(s) are accepted by Touch ID. There is no way to "tell" 1Password to use a separate fingerprint.

  • NovaScotian
    NovaScotian
    Community Member

    Thanks -- "- no way to tell 1Password to use a separate fingerprint" was what I was wondering about. Suspected not, particularly since the system just tells you "yes" or "no".

  • AGMarshall
    AGMarshall
    1Password Alumni
    edited November 2015

    You are welcome, @NovaScotian. I like the "yes" or "no" way of looking at it. As that is exactly what happens with the Touch ID API. 1Password hasn't a clue if you fingerprint is "good" or "bad". The Touch ID window that you see when you open 1Password is a separate from the main 1Password app. It is "telling" 1Password whether or not the fingerprint is "good" and if it is "good" then 1Password will unlock. So 1Password never "sees" the actual fingerprint. And we are limited in what we can do with the Touch ID window. We can call it up, but we can't say something alongs the lines of "use only fingerprint #3". :chuffed:

  • NovaScotian
    NovaScotian
    Community Member

    Nice if you could, of course. There's not a thing on my iPhone that others (including my wife) couldn't look at, but the same is not true of 1P of course, since it has passwords to pensions, investment accounts and bank accounts.

  • AGAlumB
    AGAlumB
    1Password Alumni

    @NovaScotian: It's certainly a neat idea, but I think this would fall under the heading of 'security through obscurity'. After all, if someone has access to one finger, they probably (hopefully!?) have access to the rest as well. I think I'll stop there before this gets too grisly... :dizzy:

  • NovaScotian
    NovaScotian
    Community Member

    :-) I was thinking more along the lines of being asked at a border crossing or by a TSA guy. Then, because there's nothing on the phone to hide, I'd just open it with my thumbprint to avoid trouble, but that wouldn't leave my passwords exposed and trouble would begin only if they wanted access to that too.

  • littlebobbytables
    littlebobbytables
    1Password Alumni

    Greetings @NovaScotian,

    Your last post does raise certain interesting points. I believe there have been cases in the last year that say there is no protection for fingerprints in contrast to to passwords (country specific of course). Then there is the issue that in certain countries they can 'request' access to anything and refuse you entry if you decline. For the fingerprint part the only way to combat that one is to turn off Touch ID in both 1Password and iOS and that way passcodes and Master Passwords are required. For the latter you would need the ability to remove the 1Password for iOS app completely and be able to load your data back on afterwards. I'm not saying this isn't convoluted or tricky, it's just the only way I can think to do so. You can't be asked for something if it isn't available.

    If all you want is the ability to temporarily demand the Master Password instead of being able to use Touch ID then the option Settings > Security > Lock Now in 1Password for iOS does result in 1Password demanding the Master Password the next time you attempt to unlock your vault, even if you have Touch ID set up. You are also need to use your Master Password after a device restart (as well as your iOS passcode) if that helps.

  • NovaScotian
    NovaScotian
    Community Member

    Thanks, good points.

  • AGAlumB
    AGAlumB
    1Password Alumni

    On behalf of lil bobby, you are most welcome! I'm glad that helped.

    I guess I was thinking of it more along the lines of physical coercion since (ostensibly) government agencies have to adhere to laws, and in that case simply powering off the device will require both your device passcode to unlock it and then your Master Password to unlock 1Password before Touch ID can be used in either case. Some angry dude with a weapon probably has no such compunctions.

    Be sure to reach out if you have any other questions. Cheers! :)

This discussion has been closed.