Multiple Master Passwords across devices?

EditingFX

All copies of 1PW are in sync, across Macs & iOS devices. But different devices accept different Master PWs (either my old pw, or the newer one). And just in the past day or so, my laptop, which was accepting my old (short) M/P, now wants the newer, longer M/P. Using the M/P the particular device wants, I can always log in, but I guess it's time to see what the solution is. While making sure I don't bollux the works in the process! PS - while I use 1PW many times a day, and I don't mind a longer "real master" p/w, I'd love to be able to use a simple "logged in" p/w to open 1PW. ie; my laptop is logged , I've opened 1PW once, using the M/P, then need to access it again (haven't logged out), and would like to use a "quick" pw to open. But anyway, the real thing is to figure out why my laptop has suddenly decided to start requiring the new, harder MP, and get all devices on the same page.

---

1Password Version: 1Password Version 6.1 (610006) Mac App Store
Extension Version: 4.5.3
OS Version: 10.11.3
Sync Type: Dropbox
Referrer: forum-search:multiple master passwords

JWeaver

Hi @EditingFX

Changes to your 1Password Master Password are 'processed', for lack of a better term, after the MP change has been made available to other devices via sync. When 1Password on your laptop detected that the MP, on the sync vault, had changed it began requiring the new password on your local (laptop) vault.

Megan

Hi @EditingFX ,

I'm sorry to hear that you're having trouble with your Master Password. If you're interested in the details of just how the changes to your 1Password Master Password are 'processed' (as @JWeaver says above), you can read through this excellent Dev.Bits blog post by our Mac developer, Rick.

The short answer though is that you should be using one Master Password for your vault across all devices. Once that Master Password change has been processed, you should be using the new Master Password everywhere consistently. If you're seeing something different, please let us know, as it may indicate that something has fallen out of sync.

I'd love to be able to use a simple "logged in" p/w to open 1PW. ie; my laptop is logged , I've opened 1PW once, using the M/P, then need to access it again (haven't logged out), and would like to use a "quick" pw to open.

Since our goal at 1Password is to ensure that you only ever have to remember one password to access all of your important data, I worry that adding a second password would complicate things, just a little. ;) That being said, we've done our best to offer flexible security settings to give you the level of protection you need.

I find the 'Lock when screensaver is activated' to be one of the most useful settings. On my work laptop, I have a hot corner set up (System Preferences > Desktop and Screensaver > Screensaver > Hot Corners) to start my screensaver, so it's a simple matter to lock 1Password when I need to step away from my desk. This allows me to choose a slightly more lenient lock timeout, and I find I rarely need to unlock 1Password extraneously throughout the day. Of course, your situation might require different settings, but I'm confident that you can bend those Security Preferences to your will and find a solution that works for you.

Please let me know if you have any further questions!

EditingFX

I am indeed seeing something different. I changed Master on .... wow, I can't remember which device, it was months ago. My iPhone immediately synced the new Master, of course only requiring it upon restart (THANK YOU for TouchID update!!). But my laptop and MacPro both usually accepted the old Master as well! (100% not positive on this, but I think that's correct) And I could enter either new or old Master & it would work. Just a few days ago, my laptop started requiring the new Master. I noticed as the new Master is more secure, ie, harder to type, than the old. But during all this time, saved passwords & Secure Notes (another thank you!) were being updated.

I suppose I might just update to a new Master, but I'm a touch hesitant as I'm fully vested in 1PW, and would freak if I got locked out.

ag_kevin

Hi @EditingFX,

Master Password syncing is a bit of an illusion, as 1Password never stores or transmits your master password. Here's a brief synopsis of what happens:

When you change your master password on device A, it re-encrypts the vault keys with the new master password and syncs. When you go to device B and enter your new master password, it actually fails, and then tries to decrypt the vault keys in the sync file on Dropbox or iCloud (wherever you sync) - since those vault keys have been encrypted with the new master password after syncing from device A, it works. So 1Password on device B then re-encrypts its own vault keys to the new master password you just typed in.

But if you instead went to device B and entered your old master password, remember that the vault keys stored on device B were encrypted with your old master password, so it continues to work. It's not until you try the new one on device B that it will change, and the old one will stop working.

So when you change your master password, and then perform a sync. You'll still be able to use your old master password on other devices until you try the new master password. After that, the new master password will be set and the old one will stop working.

The best thing to do at this point is to go to the devices that have your old master password, and change it to the one you want to use (and use on your other devices).

I hope that helps. Please reply if you have further questions.

Cheers,
Kevin

EditingFX

Ahhh! That explains the mystery. Thanks.

rickfillion

On behalf of Kevin, you're welcome.

Have a good day.

Rick