Can not choose secondary vault from locked screen

Hi @antocri and @chinamax ,

Unfortunately it was necessary to remove that functionality to improve the underlying security of 1Password. However, we have received a lot of passionate feedback to see that functionality returned, and yes, we are considering it. Should we bring it back, it would have to fit in with our updated security architecture so should be bring it back, it may take some time.

Thank you for using 1Password and sending us this feedback. We value user feedback greatly; especially when making improvements to the product!

Regards,
Kevin

Hi @chinamax,

The format for Dropbox has not changed, so it should continue to sync. Before you downgrade, make sure all of your vaults are synced up.

I also invite you to look into 1Password for Teams, if you haven't already. This is a service hosted by us, and provides a lot of additional security features for working with other members of a business or team. By providing the service for hosting the data, we can provide team features that Dropbox or iCloud can not. More information is available here: https://teams.1password.com

Thank you so much for using 1Password and for providing feedback!

Cheers,
Kevin

Hi @chinamax,

I want to assure you that I mentioned 1Password for Teams just in case you were interested in more workgroup features. I can promise you that the removal of this feature was not related to 1Password for Teams. We are still re-evaluating bringing back this issue as it will have to be designed differently due to the improvements to the underlying security improvements. It's still too early to give more details but rest assured we're aware of the demand.

Again, thank you so much for your feedback. We really appreciate it!

Cheers,
Kevin

Hi @chinamax,

I am sorry to hear that you're feeling frustrated with 1Password right now. I'm not sure I can give you a better answer than the others in this thread, but I wanted to follow up on something to see if we could find a workaround for your team while we explore our options here.

If you have a moment to chat about this, I'd be curious to learn more about your office set up. You mentioned that your front desk person accesses a secondary vault for the information they need to do their job. Is the computer at the front desk used by multiple people? Or does that computer only need access to the secondary vault? Not every computer in the office needs to be set up with the same configuration of vaults. We might be able to find a solution here that gives everyone the access they need, without access that they don't.

Hi @chinamax,

Thanks so much for getting back to me! My suggestion was going to be to install only the secondary vault on that computer, so that your front desk person would have access only to their vault. Since the computer is shared, it does complicate matters a bit, but I do have a workaround that will keep your data private.

Have you considered setting up separate user accounts on the Mac? With fast user switching (just click on the user's name in the menu bar) it's a fairly simple process to move back and forth between accounts. And each account can be set up with a unique instance of 1Password, with a unique configuration of vaults.

If this seems like a reasonable compromise (for the time being), I'd be happy to walk you through the process of setting it up.

I do want to reassure you that we are listening to all of this feedback and investigating ways that we can improve multiple vaults, but I hope that this workaround will help.

You're very welcome. Thank you for the feedback, @chinamax. :)

Ben

Hi @deetatee ,

If I may ask, and I'm only doing so because I may have a solution for you, does your staff use the same user account on the same Mac that you use?

There may be two ways to solve your problem:

1. If your staff use the same Mac as you do, you could create separate user accounts in OS X for your staff members, and then share only the secondary vault with them.
2. If your staff use a different Mac, you can stop sharing your Primary vault with them. You could just share the secondary vault with them.

If either of the above two scenarios will work in your situation, please let us know. And we'll be more than happy to help you set it up.

Regards,
Kevin

Hi @deetatee,

If every user has their own account, they have their own space for files, and settings. So if a user account is deleted, only their files and settings will get deleted. If each user uses the same files, there is a "/Users/Shared" folder on each Mac to put shared files where everyone can access them, and they would not be deleted if you delete a user account. You would have to decide if that's a good fit for you, but I did want to make you aware of the other options available.

Regards,
Kevin

Hi @deetatee,

OS X was designed with multiple user accounts in mind. Yes, you can absolutely use your apps with all users on the computer. Here's an article from Apple on how to set it up: https://support.apple.com/kb/PH21994?locale=en_US

After you set up those users, you'll need to launch Dropbox and log in for each user account.

And the nice thing about this is, as long as you keep your existing user, you can always go back to that user if you don't like it.

Feel free to reply if you have further questions.

Regards,
Kevin

Hi @deetatee,

Here's what you're going to want to do. It's a process that should only take a few minutes to do.

On the non-admin user, the one whose passwords you want to share with the admin:

• Setup 1Password, create a new vault.
• Setup Dropbox sync. This should create a file in Dropbox/Apps/1Password/1Password.opvault
• In Finder, go to Dropbox/Apps/. Select the 1Password folder,
• Right click on the "1Password" folder, and there should be (dropbox) Share... menu item. On my system it didn't show up right away. I had to right click a second time for it to show up... not sure what's going on there. Click that which will bring you to the Dropbox site.
• Dropbox will ask you who you want to share that with, put in the email address of the admin user's dropbox account.

That should be all that you need to do for this user.

Now on the admin user's account:

• Login to the OS X account
• Go into Dropbox, and you should see a new Dropbox/1Password folder that shows up, as that's the shared folder that we just setup. You can rename that to make it clearer who it comes from, or move it around as long as it stays within dropbox itself. Just remember what you did here as you'll need it in a few steps.
• Open 1Password and unlock it
• Use the 1Password > New Personal Vault... menu item. Create a new vault and name it appropriately to indicate that these are the passwords of the non-admin.
• Go to Preferences > Sync, and choose that new vault in the left side bar. Indicate that you'd like to sync with Dropbox. It's going to ask you to select your Dropbox folder. Instead of selecting your Dropbox folder, I want you to go into your Dropbox folder and find that shared folder we had, and the opvault file that's in it. Select that and click OK.
• It should ask you to enter in the Master Password of that other account.
• That should be it. It should then import all items and things should now sync seamlessly between the two.

If you have trouble with any of this, please let us know. We're happy to help.

Rick